S0052RS3-T13-S0052-Z · Full risk code

Tampered Training Records Concealing Problems

訓練紀錄遭竄改掩蓋問題

Design & Development
Risk Description

When conducting root cause analysis after an incident, the organization finds inconsistencies and gaps between training logs and data version records; due to unmitigated control gaps, it cannot establish the model's actual training conditions, and is therefore unable either to locate the problem or to demonstrate that it acted properly, leaving accountability unresolved, triggering compliance exposure and operational reputational costs.

Framework Mappings

OWASP Top 10 for LLMLLM03
MITRE ATLASAML.T0010
NIST AI 600-1Information Security
ISO/IEC 42001Annex A.6.2.8
ISO/IEC 5338設計與開發

Risk Treatment & Implementation Guidance

Keep tamper-evident training logs—append-only with hash chaining—recording training conditions and data versions; Adopt experiment tracking binding model, data, parameters and environment versions; Audit record integrity periodically, treating gaps and inconsistencies as deficiencies