A court IT security charter reviews commercial LLM services that advertise auto-generated defensive-control bypasses when fed customer telemetry. Which policy stance best protects the municipal environment?
Select an answer to reveal the explanation.
Short Explanation
Think of city sensor logs like sealed evidence bags—you wouldn’t send them to a stranger’s magic box offering instant bypasses. Keep court telemetry off those services; policy beats marketing claims every time.
Full Explanation
A court IT charter should treat commercial LLM services that solicit customer telemetry for auto-generated defensive-control bypasses as an OPSEC and confidentiality hazard, not optional research tooling. Forbid uploading municipal telemetry, including endpoint sensor streams, Defender exclusion lists, EDR configuration exports, and similar court defensive data. Once live civic telemetry leaves the municipality, staff lose reliable control over retention, secondary use, model training, and adversary reuse of bypass patterns against city controls. A vendor’s promise to retain prompts for no longer than thirty days does not remove the core risk: the upload itself reveals how the court defends itself to a third party whose product is marketed around generating bypasses. Anonymizing only hostnames while pasting full Defender exclusion lists into public chats still exposes actionable defensive structure. Treating uploads as optional OPSEC guidance rather than a binding charter control invites inconsistent practice and audit failure when convenience outweighs caution. Exam caveat: GOAA tests civic defensive judgment around AI-assisted offense; recognize when a commercial generative feature is adversary-adjacent tooling that must not consume production municipal data, without confusing that with authorized isolated lab work under ROE. Practical check: update the court security charter and DLP/allow-list so telemetry and defensive configuration exports cannot reach LLM bypass services; permit malware-related AI work only in isolated ranges that never ingest live city telemetry.