How to meet it
OWASP AISVS v1.01
Training Data Integrity & Traceability · Training Data Origin & Data Security
Watch training data for tampering
Verify that integrity monitoring is applied to guard against unauthorized modifications or corruption of training data.
OWASP AISVS v1.01, requirement 1.1.4
In plain English
Watch training data for changes nobody approved, whether from an attacker or from a broken job, and raise an alert when it happens.
What good looks like
- Write access to approved training data is limited and logged.
- Changes to approved datasets trigger an alert to the data owner.
- Regular jobs compare current data with the approved manifests.
How teams usually do it
- Storage access logs and object-change events sent to your monitoring.
- A scheduled job that recomputes hashes and compares them with the approved manifest.
Evidence an auditor would accept
- Access policies on training data stores.
- Alert rules and a sample alert from a test change.
Common mistakes
- Monitoring the training code repository but not the data.
- Alerts that go to a shared mailbox nobody reads.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.