{"id":"IDR-003","section":"AI Detection & Response","requirement":"Identify use cases leading to elevated risk behavior.","acceptance":"Surface the use cases and teams that require additional training on safe usage principles.","tier":"AT0–AT4","whyItMatters":"Repeat exposure and under-use point to where risk reduction or enablement will pay off.","verificationMethod":"POV","verificationTest":"High-risk use cases and the associated users are identified in a pilot.","formerly":"VAL-005","alsoIn":["value"],"sort":34,"adoptionContext":"Risky use and repeat exposure patterns can appear across the listed employee AI settings; low use is not itself proof of risk or failure.","mappings":[{"frameworks":["csf","rmf","soc2","iso27001"],"explanation":"Team-level risky-use and recurring-exposure patterns provide findings for usage monitoring, AI-risk tracking and evaluation against responsible-use/security objectives. Under-use alone is an enablement signal rather than a security anomaly; assessment and intervention remain necessary beyond surfacing patterns.\nISO/IEC 27001: Confirm the need for monitoring and choose the interventions to apply.","kind":"framework","references":{"csf":["DE.CM-03"],"rmf":["MEASURE 3.1"],"soc2":["CC7.2"],"iso27001":["Cl. 9.1","A.8.16"]},"relation":null,"conditions":[]},{"frameworks":["iso"],"explanation":"Observed risky-use and recurring-exposure patterns provide ongoing operational-monitoring findings for in-scope AI systems or controls. Under-use alone is an enablement signal; surfacing patterns does not establish responsible-use objectives or complete assessment and intervention.","kind":"framework","references":{"iso":["A.6.2.6"]},"relation":null,"conditions":[]}],"area":"AI Detection & Response","areaSlug":"AIDR","url":"/r/IDR-003","frameworkRefs":{"ISO27001":["Cl. 9.1","A.8.16"],"ISO42001":["A.6.2.6"],"NIST-CSF":["DE.CM-03"],"NIST-AI-RMF":["MEASURE 3.1"],"SOC2":["CC7.2"]}}