Question 1 of 10 · Fundamental principles and concepts of an AI management system
Why should an auditor understand ISO/IEC 23894?
ISO/IEC 23894 is guidance on AI risk management that organizations often use. It is not certifiable, does not set audit time and is not Annex A.
Question 2 of 10 · AI management system requirements
Why does an auditor examine the AI risk assessment?
The auditor checks that the organization applied its own documented AI risk assessment and treatment process against its criteria, and that the results are consistent and used. Redesigning the method or scoring risks on the auditor's own criteria breaks auditor independence. ISO/IEC 42001 expects risks to be treated to acceptable levels, not eliminated.
Question 3 of 10 · Fundamental audit concepts and principles
What is an audit trail through the AI life cycle?
Tracing one system through each stage tests how life cycle controls connect.
Question 4 of 10 · Preparing an ISO/IEC 42001 audit
What information is needed to determine feasibility of an AIMS audit?
Feasibility depends on information, cooperation, time and resources.
Question 5 of 10 · Conducting an ISO/IEC 42001 audit
How does an auditor collect evidence about AI systems?
ISO 19011 lists interviews, observation and review of documented information as the main ways to collect audit evidence, and auditors corroborate one against another. Auditors do not normally run their own tests on production systems, written management statements still need corroboration, and vendor model cards are one possible input, not a collection method.
Question 6 of 10 · Closing an ISO/IEC 42001 audit
Who decides certification after an AIMS audit?
Decisions are made independently of the audit team under ISO/IEC 17021-1.
Question 7 of 10 · Managing an ISO/IEC 42001 audit program
Why evaluate auditors periodically?
ISO 19011 calls for auditors to be evaluated and their performance monitored so the program keeps using people who are competent and objective. Counting findings would reward bias, daily rates are a commercial matter, and auditee satisfaction with findings is not a measure of audit quality.
Question 8 of 10 · Fundamental principles and concepts of an AI management system
Why must top management commit to the AIMS?
Clause 5.1 requires top management to demonstrate leadership and commitment, for example by setting the AI policy and objectives, integrating the AIMS into business processes and providing resources. Leadership commitment does not replace the risk assessment or internal audit, and it applies whatever role the organization plays with AI, not only when it sells AI.
Question 9 of 10 · AI management system requirements
How should an auditor test human oversight under Annex A controls?
Evidence of actual oversight, such as override records, shows the control operates; near-zero overrides may signal automation bias.
Question 10 of 10 · Fundamental audit concepts and principles
What should an auditor do if a technical expert's view conflicts with the evidence?
The audit team leader weighs input and evidence; experts advise but do not decide alone.
0 of 10
Fundamental principles and concepts of an AI management system
AI management system requirements
Fundamental audit concepts and principles
Preparing an ISO/IEC 42001 audit
Conducting an ISO/IEC 42001 audit
Closing an ISO/IEC 42001 audit
Managing an ISO/IEC 42001 audit program
Which domains cost you the points? Members see a breakdown by domain and a study plan built from it.