Where should AI risks be integrated into organization-wide governance?

• A. Enterprise risk register
• B. Customer support tickets
• C. Payroll system
• D. Inventory list of supplies.

Answer: (A)

Integrating AI risks into governance requires treating AI-related threats and controls as part of the organization’s overall risk landscape. The enterprise risk register serves as the central repository for capturing, assessing, and monitoring all material risks across the organization, including AI-specific ones. By placing AI risk there, you ensure consistent risk ownership, quantify impact and likelihood, track mitigations, and provide visibility to senior leadership and the board. It also supports ongoing monitoring as models evolve, data quality changes, or regulatory requirements shift, and it aligns AI risk with the organization’s risk appetite and reporting or audit processes. In contrast, operational data sources like customer support tickets, payroll systems, or inventory lists don’t offer a unified governance mechanism for cross‑cutting risk management and oversight.