# AUD-003: Restrict and audit access to raw prompt content


- Area: Audit & Evidence

- Verification: Walkthrough
- OWASP adoption tier: Tier-independent
- Formerly: GOV-005
- URL: /r/AUD-003

**Acceptance criteria:** Provide RBAC controls over who can read full prompt content, and record each access to it.

**Why it matters:** Raw prompts are among the most sensitive data the control holds, so access must be limited and logged.

**How to verify:** Only an authorized role can open full prompt content, and each access is recorded.

**OWASP adoption context:** Raw prompt access needs protection across the listed employee AI settings, independently of whether the underlying application is sanctioned.

**Mappings:**
- NIST CSF 2.0: PR.AA-05, PR.DS-01; SOC 2: CC6.3, CC7.2; ISO 27001: A.8.3, A.8.15 — Role-scoped access restricts who can read raw prompts, helping protect stored content, while records of each read supply monitoring evidence. Restrictions must operate across relevant access paths; logged reads still require review and follow-up to detect misuse.
ISO/IEC 27001: Enforce restrictions before access across the UI, exports, APIs, search and administrators. Retain, protect and analyze attributed access logs; logging access does not authorize it.
- NIST AI RMF: MEASURE 2.10 — Restricted and recorded access to identifiable prompt content provides evidence of a treatment for privacy risk. The broader examination and documentation of privacy impacts remain necessary.