How to meet it
OWASP AISVS v1.01
Monitoring, Logging & Anomaly Detection · Detection and Alerting
Include query details in extraction alerts
Verify that extraction-alert events include offending query metadata to support investigation.
OWASP AISVS v1.01, requirement 12.2.4
In plain English
When an extraction alert fires, include the details of the queries that caused it, so someone can investigate.
What good looks like
- Alerts include caller, time range and sample queries.
- Investigators can reach full logs from the alert.
- Alert content is reviewed for usefulness.
How teams usually do it
- Alert templates that attach query metadata.
Evidence an auditor would accept
- Sample alerts.
Common mistakes
- Alerts that say only "possible extraction".
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.