Question:Which of the following competencies must at least one of the audit team members possess?

At least one member of the audit team must possess knowledge of the risk-based approach to auditing, particularly because ISO/IEC 42001 auditing requires risk-centric evaluation of AI processes.

ISO/IEC 17021-1:2015 Clause 9.2.1 emphasizes the importance of a risk-based audit approach.

The Lead Auditor Course for ISO/IEC 42001 states: “Competency in risk-based thinking is critical for identifying and focusing on AI system risks that could affect the achievement of audit objectives.”