AUD-003 · formerly GOV-005

Restrict and audit access to raw prompt content

Acceptance criteria

Provide RBAC controls over who can read full prompt content, and record each access to it.

Raw prompts are among the most sensitive data the control holds, so access must be limited and logged.

Only an authorized role can open full prompt content, and each access is recorded.

Raw prompt access needs protection across the listed employee AI settings, independently of whether the underlying application is sanctioned.

NIST CSF 2.0 PR.AA-05, PR.DS-01 SOC 2 CC6.3, CC7.2 ISO 27001 A.8.3, A.8.15
Role-scoped access restricts who can read raw prompts, helping protect stored content, while records of each read supply monitoring evidence. Restrictions must operate across relevant access paths; logged reads still require review and follow-up to detect misuse. ISO/IEC 27001: Enforce restrictions before access across the UI, exports, APIs, search and administrators. Retain, protect and analyze attributed access logs; logging access does not authorize it.
NIST AI RMF MEASURE 2.10
Restricted and recorded access to identifiable prompt content provides evidence of a treatment for privacy risk. The broader examination and documentation of privacy impacts remain necessary.