Exam AAIR Topic 1 Question 14 Discussion
Actual exam question for ISACA's AAIR exam
Question #: 14
Topic #: 1
Question #: 14
Topic #: 1
An organization plans to procure an AI model from a third-party supplier for a critical business function.
Which of the following is MOST important to evaluate during supplier vetting?
Which of the following is MOST important to evaluate during supplier vetting?
Suggested Answer: A Vote an answer
AI model procurement for critical business functions requires that the selected model be fit for purpose. An AI model that does not align with the specific use case creates performance, compliance, and risk management failures regardless of its technical sophistication.
Why A is Correct: ISACA AAIR procurement guidance emphasizes use case alignment as the primary vetting criterion. A model optimized for one domain may perform poorly, introduce bias, or generate inaccurate outputs in a different context. For critical business functions, misalignment directly translates to operational risk, decision errors, and potential harm. Use case fit determines whether all other evaluation criteria are even relevant.
Why B is Wrong: Dataset size is a technical characteristic that may indicate breadth of training but does not determine suitability for a specific use case. A large general-purpose dataset may be less relevant than a smaller, domain-specific one.
Why C is Wrong: Industry certifications validate security controls and quality management processes. While useful supplementary evidence, they do not confirm that a model performs appropriately for the organization's specific application.
Why D is Wrong: Emphasis on innovation reflects vendor marketing positioning. For critical business functions, proven suitability and alignment with use cases outweighs novelty or innovation claims.
Why A is Correct: ISACA AAIR procurement guidance emphasizes use case alignment as the primary vetting criterion. A model optimized for one domain may perform poorly, introduce bias, or generate inaccurate outputs in a different context. For critical business functions, misalignment directly translates to operational risk, decision errors, and potential harm. Use case fit determines whether all other evaluation criteria are even relevant.
Why B is Wrong: Dataset size is a technical characteristic that may indicate breadth of training but does not determine suitability for a specific use case. A large general-purpose dataset may be less relevant than a smaller, domain-specific one.
Why C is Wrong: Industry certifications validate security controls and quality management processes. While useful supplementary evidence, they do not confirm that a model performs appropriately for the organization's specific application.
Why D is Wrong: Emphasis on innovation reflects vendor marketing positioning. For critical business functions, proven suitability and alignment with use cases outweighs novelty or innovation claims.
by Marjorie at Aug 05, 2026, 08:12 AM
Contact Us
If you have any question please leave me your email address, we will reply and send email to you in 12 hours.
Our Working Time: ( GMT 0:00-15:00 ) From Monday to Saturday
Support: Contact now
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).