RSK-4351 · Data leakage
Retrieval corpus contains unredacted board minutes
Ingestion job pulled a restricted SharePoint folder into the internal knowledge base without label filtering.
high
Exposure score
15/25
likelihood 3 × impact 5
Remediation SLA
7 days
detected 2026-07-16 12:05
Accountable owner
Governance
named under the AI risk charter
Affected agent
Internal Audit Copilot
AGT-1091 · Internal Audit
Investigation
What the sweep found and how it was corroborated
Ingestion job pulled a restricted SharePoint folder into the internal knowledge base without label filtering.
Documents
42
Queries touched
7
Users exposed
3
Exposure position
Placed at likelihood 3, impact 5 on the enterprise 5×5 matrix.
Remediation plan
Tracked to closure
- Purge and re-index corpus
- Enforce sensitivity-label filter at ingestion
- Notify Company Secretary
Case metadata
- Risk ID
- RSK-4351
- Category
- Data leakage
- Detected
- 2026-07-16 12:05
- Owner
- Governance
- SLA
- 7 days
- Agent record
- AGT-1091