An AI governance committee is assessing which framework to adopt for managing AI-related risks alongside existing enterprise risk management. Which statement BEST describes how COBIT 2019 can be applied to AI governance?
Select an answer to reveal the explanation.
Short Explanation
You're right to choose the option saying COBIT 2019's governance and management objectives can be extended with AI-specific design factors. It lets you fold AI risk into existing enterprise governance while adding factors like AI adoption scale and algorithmic decision-making risk appetite.
Full Explanation
The option saying COBIT 2019 offers governance and management objectives that can be extended with AI-specific design factors is correct. COBIT 2019's governance objectives, design factors, and focus areas can be adapted to include AI-specific considerations, letting organizations integrate AI risk management into existing enterprise governance. AI adds design factors such as scale of AI adoption and risk appetite for algorithmic decision-making. The option claiming AI-specific control objectives replace domain-specific AI frameworks overstates COBIT's AI-specificity. The option limiting COBIT to IT systems is incorrect; its principles apply broadly to any technology risk. The option replacing COBIT with ISO/IEC 42001 is incorrect; both frameworks can coexist and are complementary.