Individual knowledge assessment quiz

What of the following is not part of the six components addressed in the IIA’s AI Auditing framework?

• Data quality, Data Architecture & Infrastructure

• Blackbox and Ethics

• IT Security

• Governance

• Measuring performance

How should Management analyse if investment should be made in AI / RPA technology?

• Analyse the cost and benefits of the solution

• Determine if the technology will support the strategic goals of the organisation

• Determine if there is adequate resources to support the successful implementation

• All of the above

Which information request below is releavnt for audit engagement planning purposes?

• Purpose of the AI /RPA Technology, listing of users granted access to the AI / RPA technology, governance structure

• Purpose of the AI /RPA Technology, governance structure, performance indicators, operational incidents / near misses, involvement of third party vendors, compliance requirements

• Purpose of the AI /RPA Technology, governance structure, functional requirements documentation, AI / RPA technology firewalls and password security parameters

Which of the following does not need to be considered in AI / RPA project risk assessment?

• Potential biases or misuse

• Legal, privacy and regulatory requirements

• Data requirements

• Resourcing requirements

• Decommissioning

How can Management mitigate the risk of biases or “black box”?

• Verify AI output is being used legally, ethically and responsibly

• Ensure sufficient transparency in technology

• Testing to ensure results reflect the original objective

• All of the above

How should Management ensure that the AI / RPA technology is meeting its objectives?

• Periodic monitoring against established performance matrices

• Testing to ensure the technology is reliable and resilient

• None of the above

A bot has connectivity issues and has failed in performing invoice billings to clients. What next course of action should be taken?

• Activate existing business continuity plans

• Escalate the issue and resolve the bot as soon as possible

SGX should establish a channel for data subjects to seek clarifications and request reviews on how AI / RPA would impact them.

• Yes, to the extent possible

• No, it is not necessary

Which of the following inherent risk factors are relevant when assessing AI / RPA technology?

• Strategy execution, governance structure, workforce risk, cyber risk, information security risk, legal risk, regulatory and compliance risk

• Strategy execution, Innovation risk, workplace safety and health, business disruption

• Project risk, regulatory and compliance risk

Which of the following control objectives are relevant for AI / RPA level?

• Quality control, deployment, access controls, infrastructure, data protection and resilience

• Deployment, development, access controls and resilience

• Threat management, vulnerability assessment and incident response