CISSP Practice Question (Domain 2: Asset Security)

Your organization trains proprietary AI models using curated datasets purchased from multiple vendors. A vendor notifies you that one dataset was later found to contain data collected without proper consent. The model using this data is already in production. What is your PRIMARY concern?

A. The financial loss from purchasing a non-compliant dataset

B. Whether the tainted training data can be surgically removed from the model

C. Your organization's regulatory liability for processing non-consensual data

D. Renegotiating vendor contracts to include data provenance guarantees

Come back for the answer tomorrow, or study more now!

17 comments