An IS auditor is evaluating an organization’s data governance controls for its AI system.

In AI systems,data accuracy and privacyare foundational to both performance and regulatory compliance.Inadequate controls over data accuracy and privacy compliance(D) pose thegreatest risk, as they can lead to incorrect decisions, legal violations, regulatory penalties, and significant reputational damage. AAIA emphasizes that data governance programs must ensure data is accurate, secure, lawfully processed, and appropriately protected throughout the AI life cycle.

Option A (inconsistent practices) is concerning but is often a symptom of underlying governance weaknesses; its impact is most severe when it affects accuracy and privacy. Option B focuses on backup procedures, which are important for availability and resilience, but not as central to AI decision quality and legal risk. Option C (limited performance and accuracy reviews) is serious but again narrower than outright inadequacy of key controls over accuracy and privacy.