CISSP Practice Question (Domain 2: Asset Security - AI Exam Guidance)
A financial services firm acquires a pre-trained ML model from a third-party vendor for fraud detection. During onboarding, the security team discovers the vendor cannot provide documentation on the origin of the training dataset.
What should the CISO address FIRST?
A. Commission an independent bias audit before production deployment
B. Classify the model and its training data as high-value intellectual property
C. Assess whether the undocumented data sourcing introduces unmanageable supply chain risk
D. Require the vendor to retrain the model using only internally sourced datasets
Come back for the answer tomorrow, or study more now!
5
29 comments
Vincent Primiani
7
CISSP Practice Question (Domain 2: Asset Security - AI Exam Guidance)
CISSP Study Group
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
Powered by