Alle Module
Modul 2 · 2:54
What Never Leaves the Building
Real leak stories for each data class, and the grey areas nobody warns you about.
Das Wichtigste
- Sensitive data rarely arrives labeled; it hides inside conversations, attachments, code comments, and drafts.
- The question can be innocent while the payload is not: check what travels underneath your ask before you paste.
- Anonymized means the identifying context is gone, not just the name, and public means your company already published it.
- One name is still personal data; small pastes add up.
- When the email test says no, keep the question and drop the data: a placeholder gets you the same answer with none of the risk.
Kurzer Check
Drei Fragen, sofortiges Feedback. Zwei richtige Antworten schließen das Modul ab.
1.You ask an AI tool to "help me format this table" and attach salary-review.xlsx. What actually leaves with your question?
2.An HR note swaps "Elena Marsh" for "E.M." but keeps the team, the dates, and the incident. Is it safe to paste?
3.The email test says no to a support thread you were about to paste. What is the move?
Transkript
- 0:01
- Every leak starts with a reasonable request. The leak is what gets pasted underneath.
- 0:27
- Customer data never arrives labeled. It arrives inside a conversation.
- 0:45
- The ask was formatting. The payload was every colleague's salary.
- 0:59
- Keys hide in comments, config blocks, and test files.
- 1:13
- Unreleased numbers do not become safe because you wanted better wording.
- 1:27
- Anonymized means the identifying context is gone, not just the label.
- 1:45
- Public means your company already published it.
- 2:02
- Keep the question, drop the data. A placeholder gets the same answer.
- 2:24
- Keep the question, drop the data.
Weitermachen
Als Nächstes: Shadow AI and Approved Tools
Der Kurs ist kostenlos und ohne Login. IT- und Sicherheitsteams erhalten das Rollout-Kit mit Quiz und Artikel-4-Checkliste.