Study with ISO-IEC-42001-Foundation Actual Test Questions

+-----------------------------------------------------------------------------------------------+
| Choosduct manager responsible for the deployed AI system, since they direct day-to- |
| day operations and have the most direct view of AI model behaviour and incidents. |
+-----------------------------------------------------------------------------------------------+ A compliance team is mapping ISO/IEC 42001 Clause 3 terms to everyday business language for an internal onboarding wiki. They are debating who counts as ' top management ' under the standard, because the term governs which roles inherit Clause 5.1 leadership duties. According to GAICC Foundation Module 3, which option BEST reflects the Clause 3 definition of top management?

• A. The person or group of people who directs and controls an organisation at the highest level and has the authority to delegate and provide resources within it.
• B. The product manager responsible for the deployed AI system, since they direct day-to-day operations and have the most direct view of AI model behaviour and incidents.
• C. The third-party certification body ' s lead auditor, since the auditor exercises decisive authority over whether the AIMS satisfies ISO/IEC 42001 during a Stage 2 audit.
• D. Any line manager with budget authority over an AI initiative, since top management refers to the manager who funds the AI project rather than to enterprise leadership.

A regional hospital network is starting its ISO/IEC 42001 journey. The chief medical officer wants the AIMS scope to cover the radiology-triage AI in current use, on the basis that no other AI is deployed yet. The chief information officer has identified two more AI tools planned for rollout in the next six months: an admissions- forecasting model and a clinical-coding assistant. How should the AIMS scope be framed at the outset, consistent with Clause 4 of ISO/IEC 42001?

• A. Adopt an open-ended scope statement that covers any AI the hospital may deploy at any point in the future, without listing specific systems, on the grounds that a broad scope avoids the need for frequent scope-change documentation.
• B. Defer the scope decision until after the two planned tools are live, and operate the AIMS informally in the interim, since a formal scope decision before deployment risks creating obligations the hospital is not yet ready to discharge under the management system.
• C. Restrict the AIMS scope to the radiology triage tool in use today, on the basis that planned systems may be cancelled, and revisit the scope question after the planned tools have been live in production for an extended observation period.
• D. Define the AIMS scope to reflect the organisation ' s planned AI footprint, including the radiology triage tool in use plus the two near-term planned tools, and document the rationale so the scope boundaries are explicit and defensible.

An education provider uses an AI plagiarism-detection tool supplied by a third-party vendor. A student is flagged incorrectly and appeals. The teacher refers the matter to the IT helpdesk, the helpdesk refers it to the procurement team, procurement refers it to the vendor, and the vendor refers it back to the institution. The student receives no clear response for several weeks. Which issue BEST reflects an accountability weakness under the responsible-AI principles in ISO/IEC 42001?

• A. No specific role inside the institution has been assigned responsibility for AI-system outcomes experienced by users, so the appeal cannot be addressed end to end-a gap inconsistent with the accountability principle and with Clause 5.3 role assignment.
• B. The student should be required to escalate the appeal through a formal external regulator rather than through the institution, as external regulators are better placed than internal staff to adjudicate AI- related complaints raised by individual learners.
• C. The vendor should be considered solely accountable for the misclassification because the model was developed and trained externally, and the institution is therefore a passive consumer of the vendor ' s pre-built classification capability for student submissions.
• D. Accountability is adequate because each team in the referral chain followed its own internal procedure, and procedural compliance by individual teams demonstrates that responsibility has been appropriately distributed across the institution.

A small insurance firm is performing its first context analysis under Clause 4.1 of ISO/IEC 42001. The compliance lead lists the factors the team should consider. Which item BEST illustrates an EXTERNAL issue relevant to the AIMS, consistent with GAICC Foundation Module 4?

• A. The forthcoming enforcement of regional AI legislation, such as the EU AI Act, and evolving public expectations about transparency in automated insurance decisions.
• B. The composition of the firm ' s senior leadership team and the way responsibilities for AI initiatives are currently allocated across internal business units.
• C. The firm ' s internal organisational culture and the maturity of its data engineering team, both of which influence how AI projects are scoped and delivered.
• D. The current inventory of AI models deployed in the underwriting platform and the technical debt accumulated within the firm ' s own internal data pipelines over time.

An AIMS project team is drafting the interested-parties register required under Clause 4.2. A team member suggests limiting the register to paying customers and regulators. The compliance lead pushes back, citing the breadth of interested parties expected under GAICC Foundation Module 4. Which option BEST captures the range of interested parties Clause 4.2 expects?

• A. A broad range that includes customers, regulators, employees, data subjects, suppliers, the public, and communities affected by the organisation ' s AI activities.
• B. External certification body auditors and the accreditation body, since interested parties under Clause 4.2 captures the assurance ecosystem that audits the AIMS.
• C. Customers and competent regulatory authorities, since interested parties under Clause 4.2 are deliberately restricted to entities with formal commercial or statutory relationships.
• D. Top management and members of the AI governance committee, since interested parties under Clause
  4.2 refers to the internal leadership group accountable for the AIMS.