ISO-IEC-42001-LEAD-AUDITOR practice question 6 of 25

[AI Management System Requirements] Based on ISO/IEC 42001, which of the following is NOT one of the factors that an organization must consider when determining the risks and opportunities related to an AI system?

Full set: 120 questions
Answer options
A: The intended use of the AI system
B: The domain and application context of the AI system
C: The specific algorithms used to develop the AI system Correct answer
D: The potential impacts of AI decisions
Correct Answer:
C. The specific algorithms used to develop the AI system
Explanation

ISO/IEC 42001, Clause 6.1.1, requires the organization to consider its objectives, the needs of interested parties, and the potential consequences and impacts on individuals or society when determining risks and opportunities. This involves understanding the intended use, application context, and potential impacts of AI decisions. The standard focuses on the system's purpose, context, and effects rather than mandating an analysis of the specific algorithms used, which is a lower-level technical implementation detail. While the algorithm choice has implications, it is not a specified factor at this strategic planning stage.

Why Incorrect

A. The intended use is a primary factor, as it defines the scope and boundaries within which risks and opportunities must be assessed.
B. The domain and application context are critical for understanding how the AI system will interact with its environment and the specific risks that may arise.
D. The potential impacts of AI decisions on individuals, groups, and society are a core consideration for responsible AI and a key input for risk assessment.

References

1. ISO/IEC 42001:2023, Information technology — Artificial intelligence — Management system, Clause 6.1.1 (General - when planning for the AIMS).

2. ISO/IEC 42001:2023, Information technology — Artificial intelligence — Management system, Clause 6.1.2.1 (AI risk identification).

Scroll to Top