Tous les modules
Module 2 · 2:54
What Never Leaves the Building
Real leak stories for each data class, and the grey areas nobody warns you about.
À retenir
- Sensitive data rarely arrives labeled; it hides inside conversations, attachments, code comments, and drafts.
- The question can be innocent while the payload is not: check what travels underneath your ask before you paste.
- Anonymized means the identifying context is gone, not just the name, and public means your company already published it.
- One name is still personal data; small pastes add up.
- When the email test says no, keep the question and drop the data: a placeholder gets you the same answer with none of the risk.
Vérification rapide
Trois questions, correction immédiate. Deux bonnes réponses valident le module.
1.You ask an AI tool to "help me format this table" and attach salary-review.xlsx. What actually leaves with your question?
2.An HR note swaps "Elena Marsh" for "E.M." but keeps the team, the dates, and the incident. Is it safe to paste?
3.The email test says no to a support thread you were about to paste. What is the move?
Transcription
- 0:01
- Every leak starts with a reasonable request. The leak is what gets pasted underneath.
- 0:27
- Customer data never arrives labeled. It arrives inside a conversation.
- 0:45
- The ask was formatting. The payload was every colleague's salary.
- 0:59
- Keys hide in comments, config blocks, and test files.
- 1:13
- Unreleased numbers do not become safe because you wanted better wording.
- 1:27
- Anonymized means the identifying context is gone, not just the label.
- 1:45
- Public means your company already published it.
- 2:02
- Keep the question, drop the data. A placeholder gets the same answer.
- 2:24
- Keep the question, drop the data.
Continuez
À suivre : Shadow AI and Approved Tools
Le parcours est gratuit et sans connexion. Les équipes IT et sécurité disposent du kit de déploiement avec quiz et checklist article 4.