Data, Privacy & Confidentiality Response
Operational controls for data, privacy & confidentiality response.
Domain purpose
Operational controls for data, privacy & confidentiality response.
Controls and requirements
D12-CTL-01Data access containment
Establish a repeatable and accountable capability for data access containment during AI security incident handling.
D12-CTL-02PII exposure assessment
Establish a repeatable and accountable capability for pii exposure assessment during AI security incident handling.
D12-CTL-03RAG leakage response
Establish a repeatable and accountable capability for rag leakage response during AI security incident handling.
D12-CTL-04Notification decision support
Establish a repeatable and accountable capability for notification decision support during AI security incident handling.
Implementation use
Determine applicability using the framework scope and system context. Implementation should be proportionate to risk and supported by evidence sufficient to validate the intended outcome.