# Synthetic AI DLP control-test packet

All personal data is invented. Every product observation is not run; the control ID is not an ISO Annex A reference or a certification claim.

AI-DLP-EX-01 is an organisation-defined teaching control. The packet supplies concrete safe fixtures, planned outcomes and a review record with no invented execution.

| Test or evidence | Expected comparison | Observation and review |
| --- | --- | --- |
| Control definition | Protect the agreed sensitive category on the selected installed path. | Design example only; map to the actual ISMS control separately. |
| Fixture A: generic text | The agreed benign input should follow the permitted route. | Not run; no operating-effectiveness conclusion. |
| Fixture B: invented personal record | Apply the agreed protective policy for the selected category. | Not run; verify the actual response and event. |
| Fixture C: appendix content | Evaluate the same category in the selected file/content path. | Not run; do not infer file coverage from the prompt result. |
| Evidence reconciliation | Compare client action, event meaning and exported record. | Not run; record missing fields or mismatched scope. |
| Reviewer disposition | Accept only supported observations, reject a demonstrated failure, or leave missing evidence unresolved. | Current packet: not accepted as operating evidence because tests were not run. |

## Review steps

- Record the exact test scope: Name client, OS, application, input type, policy version and intended sensitive category.
- Capture actual behaviour: Keep expected outcomes separate from observed response, event and exported evidence.
- Document a reasoned decision: Accept only the tested scope, or record failure/missing evidence and the required follow-up.

## Control record

ID: AI-DLP-EX-01, organisation-defined teaching identifier.
Risk: unnecessary sensitive employee input reaches an external AI service.
Intended scope: the application, client and input path chosen by the evaluator.
ISO mapping: use the organisation’s applicable standard and Statement of Applicability; no Annex A number is asserted here.

## Planned runtime outcome

Observation: not run.
Reviewer decision: not accepted as operating evidence.
Reason: no installed-client observation accompanies this authored test plan.
Next action: run the authorised synthetic cases and record scope, response and evidence.

This is a populated assessment plan, not a successful product test or certification result.

## Source and scope

Guide: https://aona.ai/resources/guides/iso27001-ai-dlp-evidence/

Source check: 21 September 2026. General information, not professional approval or a completed control test.

- NIST SP 800-53A Rev. 5: Control-assessment overview: https://csrc.nist.gov/pubs/sp/800/53/a/r5/final
- UKAS: Validating management-system certificates: https://www.ukas.com/accreditation/about/validating-ms-certificates/