What does the COBIT framework help manage in AI security?

• A. AI risk and alignment with trustworthy AI elements.
• B. Security policy for AI vendors.
• C. Hardware reliability of AI chips.
• D. User data labeling quality.

Answer: (A)

COBIT is an IT governance framework that helps organizations govern and manage all enterprise IT, ensuring value, risk management, and performance oversight. When applied to AI security, it focuses on AI risk management and ensuring alignment with trustworthy AI principles by embedding governance, risk management, and controls into the life cycle of AI systems—from data handling and model development to deployment and ongoing monitoring. This means establishing clear accountability, policies, and risk appetite, and providing ongoing oversight and assurance that AI initiatives meet business goals while addressing security, privacy, and ethical considerations. It isn’t about setting vendor security policies, hardware reliability, or data labeling quality, which are narrower concerns outside COBIT’s governance scope.