An IS auditor is evaluating a large language model (LLM) before deployment.

" Agency " refers to the model ' s ability to take actions or access data. LLMs are non-deterministic and can be tricked via " prompt injection " to ignore their internal rules. Therefore, " Authorization and privilege checks " must be performed by a separate, deterministic security layer that is " independent of the LLM. " According to the ISACA AAIA™ Study Guide, you should never allow an AI to decide its own permissions (Option D) or those of other systems. If a user asks an AI to delete a file, the AI should simply " request " the deletion, and a standard, non-AI security system should check if the user has the right to do so. This maintains the " Principle of Least Privilege " and prevents unauthorized actions via model manipulation.