ISACA AAIR case studies
ISACA AAIR · Put your knowledge to work in context.
The ISACA Advanced in AI Risk (AAIR) certification is an advanced, practice-driven credential focused on AI-related IT risk management. ISACA describes it as designed to enhance the expertise of certified IT risk professionals, giving them the strategic skills to guide management in addressing AI-related risks and safeguarding organizations from potential financial and reputational harm. The ISACA AAIR case studies are 5 cases and about 4,787 words.
1The Tier 3 That Wasn't: Classifying a Vendor LLM Under a Legacy Model Risk Policy
Northbank ($40 billion in assets) has 300 contact-centre agents handling 45,000 chats a month. The customer experience VP has signed a letter of intent with a vendor for a hosted large language model that drafts responses, summarises account history, and suggests next-best offers.
940 words, about 5 min2Calculators or Models? Scoping 31 Unregistered ML Tools at an Asset Manager
Ardent Asset Management ($250 billion AUM) has a model risk policy that applies to 'models used to measure risk, value positions, or calculate regulatory capital'. Its nine investment teams - which collectively beat the benchmark by 40 basis points last year - have built 31 machine-learning signals and tools outside that scope, including a retrieval-augmented research assistant used by 40 analysts.
950 words, about 5 min3Sepsis Alert Decay: A Unit-Conversion Defect Disguised as Model Drift
Riverside Health's sepsis early-warning tool runs every four hours on 900 inpatient beds, scoring patients and pushing alerts to the EHR. The vendor's FDA-cleared model had a validation sensitivity of 0.81 at the deployed threshold.
944 words, about 5 min4The Silent Model Swap: Automated Hiring Scores, Bias Audits and Expansion Pressure
Meridian Retail Group hires 12,000 people a year across 1,400 stores. Since 2022 the talent team has used a vendor's automated video-interview scoring tool to rank entry-level applicants; recruiters review the top 40% and typically hire from the top 15%.
938 words, about 5 min5Nine Tier-1 Models, Two Breaches, One Analyst: Rebuilding an AI Risk Appetite
Calder Insurance Group runs 61 AI/ML models: 18 in claims triage, 12 in underwriting, 9 in fraud, and the rest across marketing, service and finance. Nine are designated tier 1.
1,015 words, about 5 min