An IS auditor is interviewing management about implemented controls around machine learning (ML) models deployed...

Only reviewing an ML model’s performance one time prior to migrating to production (option C) is of greatest concern. The AAIA™ Study Guide emphasizes that “AI and ML models require continuous monitoring and periodic performance reviews in production to detect issues such as data drift, model degradation, or evolving risk factors.” A single pre-production review fails to capture these changes and risks, potentially resulting in undetected failures or compliance issues.

Periodic (including annual) and event-driven reviews are necessary to ensure ongoing model reliability.