SETTING GLOBAL STANDARDS FOR TRUSTED AI CREDENTIALSAI Competence Framework v1.29 · current release
AI Certification Standards
Apply for conformance
You are reading the current version of the framework, v1.29.Permanent address for this version
D8.L3.05ACTIVESTABLED8 Security · L3 Proficient

Diagnose how sensitive data reached a prompt, context window, log or output.

Type Skill · introduced in version 0.1

Performance indicators

Normative. These state what would be observed in a person who holds the statement.

Traces the path, rather than treating the exposure itself as the finding
Distinguishes exposure caused by configuration from exposure inherent in the design
Identifies what else travels the same path
Evidence examples

Non-normative. Illustrative of evidence an awarding body might accept; not a required form.

A worked artefact produced in the course of normal duties, with the reasoning recorded at the time
Attestation by a competent supervisor against the indicators above, not against a general impression
Relationships

Assumes

Statements a candidate is taken to hold already. Never at a higher level than this one.

This statement assumes no other statement. It is a starting point within its domain.

Assumed by

Derived inverse. Statements that take this one as given.

No published statement assumes this one at version 1.29.

Related

Cross-domain relationships, stated in both directions and typed in the content model.

D2.L3.01

Design the information supply for an AI system, including sources, refresh and exclusions.

D2.L3.02

Assess whether a source set is fit for the questions it will be asked.

D2.L3.03

Diagnose failures caused by source quality rather than by the model.

D2.L3.04

Design retention, minimisation and deletion for AI workflows.

D2.L3.05

Assess bias arising from source composition and state its consequence.

D2.L3.06

Establish provenance requirements for output that will be published or relied upon.

D2.L3.07

Advise on the use of personal, confidential or licensed material with AI systems.

D2.L3.08

Design how conflicting sources are resolved and how the resolution is recorded.

D6.L3.08

Review an incident involving AI output and identify the assurance gap that allowed it.

Referenced by

Entries on the register of conformance claims whose coverage map cites this statement.

No entry on the register cites this statement. This block is populated from the coverage maps of register entries as they are listed.

Provenance
IntroducedVersion 0.1
Last modifiedNot modified since introduction
Statusactive · stable
Version displayedv1.29
Permanent URLaicertificationstandards.org/framework/statements/D8.L3.05
Cite this statement

AI Certification Standards (2026) AICF D8.L3.05, D8 Security, version 1.29. Available at aicertificationstandards.org/framework/v1.29/statements/D8.L3.05 (accessed date).

Propose an amendment

Statements change through the published process, not by correspondence

An amendment to this statement, its indicators or its relationships is proposed through the contribution process. Every submission is answered on the record, and the reasoning for acceptance or rejection is published in the release record for the version that follows.

Propose an amendment to D8.L3.05

Writing rules and the controlled verb list that govern how this statement is worded are published in the methodology.

This page displays version 1.29 · last reviewed 30.08.2026