Investigate a Cross-Tenant RAG Data Leak
How to work through this incident, step by step, with the evidence for each decision.
Note
Your timing and wording will differ. What matters is that each decision is made on evidence and the people affected are kept informed.
Understanding the incident
Two companies, Amber and Cobalt, use the same AI assistant to answer questions from their own documents. At 10:12 an Amber Support employee asked “What is our travel approval policy?” and got an answer that used one of Cobalt’s documents, while the sources listed only Amber documents.
Read the rest with Premium
Premium includes every solution, and practice in Architecture Workshop and Incident Room.
Premium is coming soon.