Episode 17 — Use COBIT-Style Controls for AI: Objectives, Practices, and Assurance Thinking (Domain 1)
Applying the COBIT framework to AI governance provides a structured, objective-based approach to control design that is central to ISACA’s methodology in Domain 1. This episode explains how to adapt COBIT’s governance and management objectives to the specific technical requirements of artificial intelligence. For the AAIR certification, candidates should understand how to use control objectives to define what an AI process should achieve, such as ensuring data integrity or model reliability. We discuss the importance of "assurance thinking," which involves verifying that controls are not only designed correctly but are operating effectively in the production environment. Using a framework like COBIT helps bridge the gap between technical teams and auditors by providing a standardized language for describing AI controls. We look at examples of how to apply COBIT’s "Build, Acquire, and Implement" domain to the AI development lifecycle, ensuring that risk management is baked into the system from the initial design phase through to deployment and maintenance. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
