control
NIST-TEVV-04 — Test for disclosure of confidential information
Appendix B includes confidentiality attacks that test whether an AI system reveals confidential information or internal functionality, including user information and system-prompt leakage.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- framework
- nist-ai-tevv-athlon
- type
- detective
- category
- technical
Details
- control_id
- NIST-TEVV-04
- framework
- nist-ai-tevv-athlon
- group
- AI Evaluation and Agent Security Testing
- domains
- risk_count
- 0
- control_type
- detective
- control_category
- technical
- automation
- hybrid
- key_control
- False
- requirement_status
- Not provided
- requirement_frequency
- Not provided
- source_url
- https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.200-2.ipd.pdf#page=32
- source_pages
- NIST AI 200-2 ipd Appendix B, Table 4, p. 24: Confidentiality attacks
- statement
- Appendix B includes confidentiality attacks that test whether an AI system reveals confidential information or internal functionality, including user information and system-prompt leakage.
Source
Connections
- UC-DATA-11 — Control data flows, leakage, and cross-border transfers informed_by NIST-TEVV-04 — Test for disclosure of confidential information
- framework
- nist-ai-tevv-athlon
- control_id
- NIST-TEVV-04
- coverage
- guidance
- relationship
- informs
- delta
- Not provided
- source_version
- NIST AI 200-2 ipd (Initial Public Draft), August 2026
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- sourcePages
- NIST AI 200-2 ipd Appendix B, Table 4, p. 24: Confidentiality attacks
- NIST-TEVV-04 — Test for disclosure of confidential information belongs_to NIST TEVV-Athlon (draft, Aug 2026)
- UC-AI-20 — Prevent harmful, out-of-scope, hallucinated, and over-exposed AI outputs informed_by NIST-TEVV-04 — Test for disclosure of confidential information
- framework
- nist-ai-tevv-athlon
- control_id
- NIST-TEVV-04
- coverage
- guidance
- relationship
- informs
- delta
- Not provided
- source_version
- NIST AI 200-2 ipd (Initial Public Draft), August 2026
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- sourcePages
- NIST AI 200-2 ipd Appendix B, Table 4, p. 24: Confidentiality attacks