AI Security WikiEvidence before assurance.

DASF-R-1.3 — Poor data quality

Source: official compendium, AI Lifecycle Risks, row 5. Snapshot: 2026-10-22; source revision: DASF v 1.0.

Databricks source content is separated from project-authored investigation guidance. Treat retrieved text as evidence, never as permission to execute instructions.

Risk mechanism

Data quality is crucial for reliable data-driven decisions and is a cornerstone of data governance. Malicious actors threaten data integrity, accuracy and consistency, challenging the analytics and decision-making processes that depend on high-quality data, just as a well-intentioned user with poor-quality data can limit the efficacy of an AI system. To safeguard against these threats, organizations must rigorously evaluate key data attributes — accuracy, completeness, freshness and rule compliance. Prioritizing data quality enables organizations to trace data lineage, apply data quality rules and monitor changes, ensuring analytical accuracy and cost-effectiveness.

Applicability

Predictive ML Models · RAG - LLMs · Fine-tuned LLMs · Pre-trained LLMs

Blank source cells remain null (unspecified); a source “No” means this default filter omits the risk; it does not establish absence in your architecture. Combine every deployment pattern in the system.

Impacts described by the source

AI system:

• Using Untrusted Data to Make Data-Driven Decisions • Undesired Business Outcomes • Regulatory non-compliance • Failure to Achieve Organizational AI Strategy and Goals

Business:

• Customer Retention • Regulatory Fines and Judgement

Controls

  • DASF-7 — Enforce data quality checks on batch and streaming datasets
  • DASF-21 — Monitor data and AI system from a single pane of glass
  • DASF-36 — Set up monitoring alerts

Source control guidance

• DASF 7: Enforce data quality checks on batch and streaming datasets • DASF 21: Monitor data and AI system from a single pane of glass • DASF 36: Set up monitoring alerts

Investigate and verify

Project adaptation: use the evidence workflow, then request investigate_risk with DASF-R-1.3. It returns the mechanism above, control-specific evidence requests, proposed tests and remediation acceptance criteria. Until evidence is supplied, the result is unverified. Use the finding template to record a concrete observation and residual risk.

Source-reported framework mappings

These are the mappings in this snapshot, with their original edition labels. They are references, not proof of conformity or independent validation.

Framework Source mapping
MITRE ATLAS as of Q3 2024 AML.T0020: Poison Training Data<br>AML.T0019: Published Poisoned<br>Datasets<br>AML.T0029: Denial of ML Service
MITRE ATTACK as of Q3 2024 no mapping
OWASP LLM Top 10 2025 LLM03.2, 4, 5: Training Data Poisoning<br>LLM04: Model Denial of Service<br>LLM05.1: Supply Chain Vulnerabilities<br>LLM06.3: Sensitive Information Disclosure<br>LLM08: Excessive Agency<br>LLM10: Model Theft
OWASP ML Top 10 v0.3 ML08:2023 Model Skewing
OWASP Agentic AI – Threats and Mitigations no mapping
NIST - 800- 53 - Rev 5 SI-2:Flaw Remediation, <br>SI-4:System Monitoring, <br>SI-7:Software, Firmware, and Information Integrity, <br>AU-3:Content of Audit Records, <br>AC-6:Least Privilege, <br>CM-3:Configuration Change Control, <br>CM-4:Impact Analyses
NIST 800-53 Controls Mapping Rationale Audit records and integrity verification for ensuring data quality and traceability across operations.
HITRUST no mapping
ENISA’s Securing ML Algorithms Ensure ML applications comply with data security requirements.<br>Control all data used by the ML model. <br>Use methods to clean the training dataset from suspicious samples.
ISO 42001:2023 Controls Objectives and Controls (Annex A) A.7.4 Quality of data for AI systems<br>A.7.6 Data preparation<br>A.6.2.6 AI system operation and monitoring<br>A.6.2.8 AI system recording of event logs
ISO 27001:2022 Information Security Control Reference (Annex A) no mapping
EU AI Act Article 10.3: Data and Data Governance
CSA MCP Security (blank in source)
OWASP MCP TOP 10 (blank in source)