Apply incident-response discipline when an AI red-team test unexpectedly touches sensitive data.
Stop condition A recruiting assistant returns real candidate phone numbers during a red-team run that was supposed to use synthetic data. The team must preserve evidence without causing more exposure. Incident-response reflex Pause, preserve, protect, route. The first minutes decide whether a sensitive AI finding stays controlled or becomes a larger incident. Keep probing Feels useful, expands exposure. The issue moves into a controlled triage path. A red-team test does not have permission to expand a sensitive-data exposure just because the exposure began inside a test. 01 Pause 02 Preserve 03 Route Step 1 The assistant has returned three phone…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in