최신GAICC ISO/IEC 42001 Foundation - ISO-IEC-42001-Foundation무료샘플문제

A. A finance-system budget line called " AI governance " totalling a substantial annual figure, with no supporting breakdown of how funds were allocated across training, tooling, monitoring, or external advisory services during the period.

B. A signed management-review minute showing the chief executive chaired the review, reviewed AIMS performance indicators, approved resource changes, and tasked named owners with follow-up actions carrying agreed deadlines and reporting dates.

C. An intranet news item from twelve months ago announcing that the organisation has adopted ISO/IEC
42001 as its preferred AI management framework, written by the corporate-communications team rather than by top management directly.

D. A printed AI policy displayed in the reception lobby, signed by a former chief executive who departed before the AIMS scope was extended to cover the newer generative-AI content-moderation tools that the company now operates.

A. Postpone any structured impact assessment until after the first quarter of operational data has been gathered, on the basis that the charity will be better placed to evaluate impact once real-world caseworker usage patterns and outcome distributions have been observed.

B. Verify the model ' s predictive accuracy meets the agreed target, document the result in a one-page summary signed by the head of technology, and proceed to launch without further reference to other responsible-AI considerations for this charitable use case.

C. Complete an AI System Impact Assessment under Clause 6.1.4 covering fairness, transparency, human oversight, privacy, and safety considerations, define acceptance criteria, assign role responsibilities, and gain documented approval before launch.

D. Confirm that the vendor has provided a model card, treat that document as a complete responsible-AI record for the deployment, and rely on the vendor ' s representations rather than performing an internal review of the model ' s fitness for the charity ' s specific population of clients.

A. The firm ' s internal organisational culture and the maturity of its data engineering team, both of which influence how AI projects are scoped and delivered.

B. The forthcoming enforcement of regional AI legislation, such as the EU AI Act, and evolving public expectations about transparency in automated insurance decisions.

C. The composition of the firm ' s senior leadership team and the way responsibilities for AI initiatives are currently allocated across internal business units.

D. The current inventory of AI models deployed in the underwriting platform and the technical debt accumulated within the firm ' s own internal data pipelines over time.

A. The AI governance lead should remove privacy considerations from the AI System Impact Assessment scope and refer them to the privacy officer for a parallel assessment, with no formal linkage between the two assessment processes maintained within the AIMS records.

B. Personal-data protection is a relevant input to the AI System Impact Assessment under Clause 6.1.4, and the AIMS should coordinate with applicable privacy obligations rather than treating data protection as a separate concern outside the scope of AI governance.

C. Personal-data protection sits entirely outside the AIMS because ISO/IEC 42001 governs AI systems and applicable privacy laws govern personal data, so the two regimes operate independently with no expectation of coordination across them.

D. The AIMS should record an exception noting that training data is exempt from privacy review on grounds of model improvement, since pursuit of model accuracy provides a legitimate operational basis for the platform ' s use of historical booking information in training.

A. ISO/IEC 38507, which sets governance implications of AI use for governing bodies and supports board- level oversight in organisations adopting ISO/IEC 42001.

B. ISO/IEC 27001, which sets requirements for information security management systems and is widely used by SaaS vendors that also pursue ISO/IEC 42001.

C. ISO/IEC 22989, which provides AI vocabulary and concepts and is the normative reference cited inside ISO/IEC 42001 for terminology used during audits.

D. ISO/IEC 17021-1, which sets requirements for bodies providing audit and certification of management systems and applies to ISO/IEC 42001 certification bodies.