AI Incident Response and Business Continuity

CRAGE · 18 questions

• A 311 GenAI bot begins leaking internal knowledge snippets. What IR artifact should the city write?
• County IR must triage AI failures consistently. How should AI incidents be classified?
• Transit sees anomalous GenAI answers in rider chat. What containment action fits while preserving service?
• A housing authority finds a poisoned training batch. What eradication and recovery step should follow?
• After a utility AI outage, what post-incident metrics should the review capture?
• Library AI logs expose patron contact data. What external action should the IR plan require?
• A court AI event may involve sealed data. What escalation path should IR define?
• Emergency management wants readiness for AI outages affecting public info. What exercise should it run?
• Fire/EMS reviews IR coverage for model drift and hallucination crises. What limitation should the plan document?
• 311 designs business continuity for its AI assistant. What BC planning step comes first?
• An assessor’s office depends on valuation AI. What DR practice should IT and GRC establish?
• A parks department depends on a vision pipeline for trail advisories during peak season. Which continuity action best prepares for pipeline failure?
• A water utility’s customer GenAI assistant depends on a third-party API. Which BCP element best addresses supply-chain continuity?
• An elections office will use AI-assisted communications tools before election season. Which readiness step best strengthens AI incident response?
• After an AI misinformation incident in outbreak messaging, what should public health do to improve continuous readiness?
• A city PIO must brief media after a resident-facing bot gaffe. Which communications approach best fits AI incident response?
• A county wants proof its AI continuity plan works. Which testing mix best covers municipal AI disaster recovery?
• Transit maps AI dependencies for recovery. Which prioritization best reflects continuity tiers?