Tampered Training Records Concealing Problems
訓練紀錄遭竄改掩蓋問題
Design & Development
Risk Description
When conducting root cause analysis after an incident, the organization finds inconsistencies and gaps between training logs and data version records; due to unmitigated control gaps, it cannot establish the model's actual training conditions, and is therefore unable either to locate the problem or to demonstrate that it acted properly, leaving accountability unresolved, triggering compliance exposure and operational reputational costs.
Framework Mappings
OWASP Top 10 for LLMLLM03
MITRE ATLASAML.T0010
NIST AI 600-1Information Security
ISO/IEC 42001Annex A.6.2.8
ISO/IEC 5338設計與開發
Risk Treatment & Implementation Guidance
Keep tamper-evident training logs—append-only with hash chaining—recording training conditions and data versions; Adopt experiment tracking binding model, data, parameters and environment versions; Audit record integrity periodically, treating gaps and inconsistencies as deficiencies