Which statement best describes the relationship between an AI security program and organizational objectives?

• A. An AI security program must align with organizational objectives, involve stakeholders, and use effective metrics.
• B. It should be independent of business goals and stakeholder input.
• C. It should focus only on software updates.
• D. It should be driven solely by regulatory compliance.

Answer: (A)

Aligning an AI security program with organizational objectives ensures security activities directly support business value and safe AI adoption. When security is shaped by the broader goals of the organization, resources are focused on the risks that matter most to the business, relationships with stakeholders are established, and the program can adapt as priorities change. Involvement of stakeholders brings governance, accountability, and diverse expertise from across the organization, so security requirements reflect real-world use, compliance needs, and operational realities. Using effective metrics provides visibility into risk reduction, program progress, and return on security investments, making it possible to steer improvements and justify actions.

Choosing independence from business goals and stakeholder input misses alignment with value and governance. Focusing only on software updates ignores risk-based prioritization and does not address broader organizational needs. Relying solely on regulatory compliance treats security as a checkbox rather than a means to manage risk and enable secure AI in practice.