Building a threat profile for a county clerk summarization AI, which scenario belongs in the profile alongside external abuse classes?
Select an answer to reveal the explanation.
Short Explanation
Threat profiles need the inside desk as well as the outside fence—a clerk tool that can touch sealed records can be misused by someone with a badge. You'll put insider misuse on the map, not retention timelines.
Full Explanation
Building a threat profile for a county clerk summarization AI requires including insider misuse scenarios alongside external abuse classes—specifically privileged staff summarizing sealed or restricted records outside policy. Summarization tools amplify insider risk because authorized users already clear authentication and can induce the model to condense content they should not exfiltrate or share. A complete civic profile therefore covers external injection/abuse and internal privilege misuse with compensating controls (DLP, access reviews, sealed-matter blocks, audit of summary exports).
Benchmark timing for generating summaries of lengthy published meeting minutes fails conceptually as a performance-measurement task rather than an external abuse or insider-misuse threat in this AI threat profile. Regular maintenance windows for updating the deployed open-source summarization dependencies fail as an operational upkeep item with no direct threat relevance to the profile. Standard retention timelines for archiving approved public record summaries fail as a records-management schedule unrelated to active threat scenarios.
Exam caveat: Civic records AI profiles must include insider/privilege-misuse paths, not only external attackers. Avoid benchmark-timing, dependency-maintenance, and retention-timeline distractors.
Operational check: add insider sealed-record misuse to the clerk AI threat profile; verify technical controls prevent summarization of sealed classifications; enable audit alerts on sensitive summary actions; and brief clerks that policy still governs AI-assisted handling of restricted matters.