Incident Response for AI
Guidance for investigating and responding to incidents involving AI tools, including data leaks and model misuse.
Detection & Triage
- Monitor audit logs and alerts for anomalous prompt patterns
- Triage based on data sensitivity and user intent
Response Steps
- Contain: revoke access where needed
- Analyze: determine data types and scope
- Remediate: rotate secrets, notify impacted parties
- Review: update policies and controls