Scope prompt-log access: Which missing control most directly addresses this exposure?
Scope access to prompt logs to protect sensitive content while retaining necessary observability.
The question
A media production team logs prompts and outputs from a writing assistant. Prompts sometimes contain unreleased scripts and personal contact details. Logging, retention, monitoring, supplier review, and incident procedures satisfy internal policy, but access to sensitive prompt logs is broadly available. Which missing control most directly addresses this exposure?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Replace the assistant with a model trained only on public creative material.Changing the model may affect some training-data concerns, but it does not secure sensitive prompts already entering the logs.
- Capture more context in each prompt log.Additional context may aid troubleshooting, but it increases the amount of sensitive information exposed without correcting broad access.
- Scope prompt-log access. ✓Restricting access directly reduces exposure of sensitive prompt contents while preserving logs needed for monitoring and investigation.
- Tell creators to redact sensitive details before submission.User redaction may reduce future collection, but it does not protect existing logs or provide a dependable technical access control.
The trap
Do not solve a log-access problem by removing useful observability; protect the logs through scoped access. How to remember it
Scope access to prompt logs to protect sensitive content while retaining necessary observability.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How to Govern AI Deployment and Use questions
- Treat retrieved instructions as untrusted data: What missing control most directly addresses this →
- Notify affected customers and responsible internal: Which missing control most directly addresses this gap? →
- Suspend the affected function and route applicants through: Which action most directly limits ongoing impact? →
- All 424 Understanding How to Govern AI Deployment and Use questions →
Part of the Certsqill AIGP question bank · Understanding How to Govern AI Deployment and Use ·
Every answer, right and wrong, comes with its own explanation.