Module Exam AIMS
Course Lead Auditor Training Course (ISO 42001:2023)
Exam Date
Name
Time 90minutes
Mark 90points
Pass criteria More than 56point
1st Local
Examiner
Assessment Date
2nd HQ
Approval
Mark points Result C / NYC
• Section A: 5 × 1 mark = 5 marks
• Section B: 5 × 5 marks = 25 marks
• Section C: 3 × 10 marks = 30 marks
• Section D: 2 × 15 marks = 30 marks
• Total: 90 marks
• Passing Score: 60% (54 marks)
KVQA
Section A – Multiple Choice Questions (MCQs)
(1 mark each – Choose the best answer)
1. ISO/IEC 42001:2023 provides requirements for:
a) Artificial Intelligence Product Certification
b) Artificial Intelligence Management Systems
c) AI Ethical Principles only
d) AI Hardware Specifications
2. Which clause of ISO/IEC 42001 covers “Context of the Organization”?
a) Clause 4
b) Clause 5
c) Clause 6
d) Clause 7
3. The Plan-Do-Check-Act (PDCA) cycle in ISO/IEC 42001 is used to:
a) Reduce costs of AI development
b) Implement continuous improvement in AIMS
c) Approve AI products for deployment
d) Test AI models for accuracy only
4. Which of the following is NOT a requirement under ISO/IEC 42001 risk
management?
a) Identifying AI risks and opportunities
b) Evaluating and prioritizing risks
c) Eliminating all risks completely
d) Treating and monitoring risks
ISO/IEC 42001 is applicable to:
a) Only large AI companies
b) Any organization using or developing AI systems
c) Government bodies only
d) AI hardware manufacturers only
KVQA-IS-E; ED-REV: 01-00, DATED 23-11-2021 2/5
Section B – Short Answer Questions
(5 marks each – Write concise answers)
6. Explain the purpose of Clause 5 – Leadership in ISO/IEC 42001.
7. Describe two examples of documented information that an AIMS should
maintain.
8. What is the role of impact assessments in ISO/IEC 42001?
9. Define AI governance in the context of ISO/IEC 42001 and give one practical
example.
Why is stakeholder engagement important in AI risk management?
KVQA-IS-E; ED-REV: 01-00, DATED 23-11-2021 3/5
Section C – Case Study / Scenario-Based Questions
(10 marks each – Provide detailed responses)
Case Study 1 – AI Recruitment Bias
An AI-based recruitment tool is accused of bias against certain demographics.
• Which clauses of ISO/IEC 42001 would be most relevant to address this
issue?
• Outline the steps the organization should take under AIMS to resolve the
problem and prevent recurrence.
• Suggest one improvement to the AI governance process to avoid similar issues
in the future.
Case Study 2 – AI Fraud Detection Risks
Your organization is deploying an AI system for financial fraud detection.
• List three potential risks and explain how ISO/IEC 42001 suggests managing
them.
• How should the organization document and communicate its risk management
plan?
• Provide an example of a continuous monitoring measure to ensure ongoing
compliance.
Case Study 3 – Autonomous Vehicle Safety
A company is developing AI for autonomous vehicles. During testing, the system fails
to recognize certain traffic signs in poor lighting.
• Identify the relevant clauses of ISO/IEC 42001 that would apply to this
scenario.
• Propose a corrective action plan that aligns with AIMS requirements.
• Explain how the “Check” and “Act” phases of the PDCA cycle would apply
here.
KVQA-IS-E; ED-REV: 01-00, DATED 23-11-2021 4/5
Section D – Essay Questions
(15 marks each – Analytical and detailed answers required)
13. Discuss how ISO/IEC 42001 integrates ethical AI principles into a formal
management system, and how this differs from voluntary AI ethics guidelines.
14. Critically evaluate the benefits and challenges of implementing ISO/IEC
42001 in a small-to-medium enterprise (SME) developing AI solutions.
KVQA-IS-E; ED-REV: 01-00, DATED 23-11-2021 5/5