Exam AAISM Topic 1 Question 369 Discussion
Actual exam question for ISACA's AAISM exam
Question #: 369
Topic #: 1
Question #: 369
Topic #: 1
A global organization experienced multiple incidents of staff pasting confidential data into public chatbots. Which action is MOST important to reduce short-term risk?
Suggested Answer: A Vote an answer
AAISM states that the most effective short-term mitigation for unintentional data leakage into public AI tools is targeted, role-based AI security awareness, focused on:
- what data cannot be entered
- consequences of leakage
- real-world scenarios employees face
An acceptable-use policy (C) is necessary but insufficient alone. Blocking LLMs (D) may reduce access but does not change user behavior and may cause shadow AI usage. Generic phishing training (B) does not address AI misuse risks.
- what data cannot be entered
- consequences of leakage
- real-world scenarios employees face
An acceptable-use policy (C) is necessary but insufficient alone. Blocking LLMs (D) may reduce access but does not change user behavior and may cause shadow AI usage. Generic phishing training (B) does not address AI misuse risks.
by Brandon at Oct 01, 2026, 10:13 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).