S0180RS6-T21-S0180-Z · Full risk code

Information Desynchronization Between Systems

系統間資訊不同步

Operation & Monitoring
Risk Description

When a customer-facing system makes commitments based on data that has not yet synchronized, while the actual state differs; due to unmitigated control gaps, the commitment cannot be honored and generates complaints, yet each system's own records appear entirely correct, triggering compliance exposure and operational reputational costs.

Framework Mappings

MITRE ATLASAML.T0051
NIST AI RMFMEASURE 2.6
ISO/IEC 23894§6.4
OWASP Top 10 for LLMLLM06
MAESTRO
ISO/IEC 5338運作與監控
MIT AI Risk RepositoryDomain 7

Risk Treatment & Implementation Guidance

Establish shared-state management so cross-system commitments rest on synchronized consistent data; Implement consistency mechanisms—version stamps and eventual-consistency checks—to detect desynchronization; Require state confirmation before commitment-making actions to customers