Question

A financial services firm is deploying a generative AI assistant that lets employees query internal HR and payroll documents through a chat interface. During security review, the risk team is concerned that a junior analyst could receive salary information for senior executives that they are not authorized to view. Which security consideration should the AI transformation leader prioritize to address this concern?

Accepted Answer

Enforce identity-based authentication and authorization so the assistant only retrieves documents the requesting user is already permitted to access

Answer

Increase the model's context window so it can process all HR documents in a single prompt

Answer

Apply prompt engineering that instructs the model not to reveal executive salaries

Answer

Fine-tune the model on the complete payroll dataset to improve response accuracy