Exam AAISM Topic 2 Question 68 Discussion
Actual exam question for ISACA's AAISM exam
Question #: 68
Topic #: 2
Question #: 68
Topic #: 2
Which of the following is the MOST likely cause of model drift?
Suggested Answer: A Vote an answer
Model drift occurs when the statistical properties of input data and/or the relationship between features and outcomes change over time, causing degraded model performance. The AAISM guidance classifies data- centric causes (distribution shift, concept drift, and contamination) as the primary drivers and highlights that malicious contamination of training or incremental learning data (data poisoning) is a direct, high- likelihood driver of observable drift in production because it changes the effective data-generating process the model learns from. In contrast:
* Perfect knowledge is an attacker capability descriptor, not a drift cause.
* Membership inference targets privacy of the training set and does not inherently shift data distributions.
* Model stealing targets IP/confidentiality; it does not change the victim model's data distribution or decision boundary in situ.
References:* AI Security Management (AAISM) Body of Knowledge: Model Risk & Drift; Data Integrity Risks; Adversarial ML-Poisoning vs. Evasion* AAISM Study Guide: Production Monitoring & Drift Management; Risk Scenarios-Data Poisoning Impacts and Controls* AAISM Mapping to Standards:
Lifecycle Risk Treatment-Robustness to Data Contamination; Continuous Monitoring and Feedback
* Perfect knowledge is an attacker capability descriptor, not a drift cause.
* Membership inference targets privacy of the training set and does not inherently shift data distributions.
* Model stealing targets IP/confidentiality; it does not change the victim model's data distribution or decision boundary in situ.
References:* AI Security Management (AAISM) Body of Knowledge: Model Risk & Drift; Data Integrity Risks; Adversarial ML-Poisoning vs. Evasion* AAISM Study Guide: Production Monitoring & Drift Management; Risk Scenarios-Data Poisoning Impacts and Controls* AAISM Mapping to Standards:
Lifecycle Risk Treatment-Robustness to Data Contamination; Continuous Monitoring and Feedback
by Adair at Aug 15, 2026, 09:53 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).