AI Security Second Brain

AI Incident Response — Operation Log

2 min read

⭐ Star on GitHub

Append-only. Newest entries at the bottom.

2026-07-28 — Initial ingest

Sources ingested: raw/AI-incident-response/ — 4 files, ~4,700 words. All read in full.

  • Incident response for AI systems.md (Microsoft Learn, Zero Trust / SFI) — 1,248 words
  • What is AI Incident Response_ A Practical Overview.md (Wiz) — 1,774 words
  • Defending AI Systems...md (CoSAI announcement, Mary Beth Minto, 30 Oct 2025) — 897 words
  • Defining an "AI Incident Response".md (AI Incident Database) — 802 words

Pages created (5):

  • index.md, log.md
  • ai-incident-response.md — synthesis across all four
  • microsoft-ir-readiness.md
  • cosai-framework.md
  • aiid-incident-responses.md

Findings recorded:

  • The term carries three distinct meanings across these four sources (AI-accelerated IR, IR for AI systems, public disclosure statement). Recorded explicitly so they don’t get conflated.
  • AI Act Art 73(6) constrains containment: no system alteration affecting cause evaluation before notifying authorities. This is in tension with Microsoft’s 60-minute containment target and CoSAI’s rollback/purge/rebuild options, and belongs in playbooks explicitly.
  • CoSAI’s telemetry list (prompt logs, inference activity, tool executions, memory state changes) is the most actionable line in the collection.
  • Both AIID example responses fail the same element — prevention of recurrence. That looks structural, not incidental.
  • Microsoft is stronger on organisational and human factors; CoSAI is stronger on technical execution. Complementary, not substitutable.

Root index updated: yes.

Open items:

  • The CoSAI framework PDF itself is not in raw/ — only the announcement blog post. The CACAO playbooks, five architecture patterns and per-component ATLAS mappings are the valuable content and remain unread. Highest-priority ingest in this collection.
  • raw/MITRE-ATLAS/ and raw/OWASP-Top-10-for-LLMs/ are empty; both are cited as resources by these sources.
  • The Wiz source is substantially vendor marketing; only the comparison table and the automated-vs-AI-driven distinction were used.

2026-07-28 — ATLAS cross-linking

cosai-framework.md and index.md both stated raw/MITRE-ATLAS/ was empty. ATLAS is now ingested (release 2026.06) — see mitre-atlas-wiki/. Updated to point at it, noting that its 63 case studies double as ready-made tabletop scenarios for the AI-specific exercise Microsoft’s readiness pattern requires annually.

Still outstanding: CoSAI’s per-component ATLAS mapping across five architecture patterns lives in the framework PDF, which remains absent from raw/.

Graph View