Kedis ku xidhan hagaha · Dhexdhexaad Heerka

Liiska Kediska Qiimaynta Iibiyaha ee AI

Tijaabi sida loo kala saaro AI iibiyeyaasha: dalbashada caddaynta saxda ah ee xogtaada, akhrinta warbixinnada SOC 2, shuruudaha haynta xogta iyo qodobbada bixitaanka.

Wadooyinka haga ee la xidhiidhaLiiska hubinta Iibiyaha ee AI
Su'aal 1 ee 8

Waa maxay farqiga ugu muhiimsan ee u dhexeeya warbixinta SOC 2 Nooca II iyo warbixinta Nooca I?

Horudhac su'aal kasta8 su'aalo

Jawaabaha iyo sharraxaadaha waxay soo baxayaan markaad qaadanayso kediska.

  1. Waa maxay farqiga ugu muhiimsan ee u dhexeeya warbixinta SOC 2 Nooca II iyo warbixinta Nooca I?
    • Type II covers only physical security
    • Type I is newer and more thorough
    • Type II covers how controls operated over a period, while Type I describes them at a single point in time
    • Type I applies only to AI vendors
  2. Marka loo eego hagaha, waa maxay caddaynta saxda ah ee ugu xooggan ee uu iibiyahu bixin karo?
    • A pilot on a test set you build from real cases, scored by your own staff
    • A polished live demo
    • Published marketing case studies
    • A claim that the product uses the most advanced model available
  3. Liiska hubinta Iibiyaha ee AI: waa maxay ISO/IEC 42001?
    • A data privacy law in the European Union
    • A standard for AI management systems
    • A cloud pricing benchmark
    • A penetration testing tool
  4. Halkee ayay tahay in jawaabaha iibiyaha ee ku saabsan haynta xogta iyo tababarka xogta macaamiisha lagu diiwaangeliyo?
    • In a sales email
    • In a slide deck from the demo
    • In a verbal assurance during a call
    • In the contract or data processing agreement
  5. Which of the following is a red flag in an AI vendor evaluation?
    • The vendor offers to run a pilot on your data
    • The vendor claims 100 percent accuracy
    • The vendor names its subprocessors
    • The vendor provides a SOC 2 Type II report
  6. Waa maxay sababta aad u ilaalinayso qayb ka hadhay tijaabada tijaabada tijaabada ee waratada waligood helin?
    • To reduce the cost of the pilot
    • Because vendors are legally barred from seeing test data
    • So vendors cannot tune their product to the specific test cases
    • To make the pilot run faster
  7. Why does the guide recommend recording the model version and configuration used during testing?
    • A later change to the upstream model can invalidate the pilot results
    • It is required to get a SOC 2 report
    • It reduces the price of the contract
    • It prevents prompt injection attacks
  8. Why measure types of errors instead of relying on a single accuracy number?
    • Accuracy numbers are always inflated by exactly 10 percent
    • Vendors are not allowed to report accuracy
    • Error types are easier to calculate
    • A rare but severe error can matter more than many minor ones