Conversation Content Leaking Across Users
對話內容跨使用者外洩
When an enterprise knowledge question-answering system has inadequate permission isolation, and confidential content from one department appears in another department's query results; due to unmitigated control gaps, on discovery the organization must review access controls comprehensively, triggering external stakeholder impacts and causing the system is suspended in the interim, and the leaked content cannot be recovered.
Framework Mappings
Risk Treatment & Implementation Guidance
Enforce permission controls consistent with source systems across the retrieval-generation chain, filtering results by user entitlement; Strictly isolate conversation context and sessions, preventing residual context across users and departments; Verify isolation with cross-permission testing before launch and continuously audit access logs