AI Security WikiEvidence before assurance.

DASF-R-6.2 — Insufficient evaluation data

Source: official compendium, AI Lifecycle Risks, row 28. Snapshot: 2026-10-22; source revision: DASF v 1.0.

Databricks source content is separated from project-authored investigation guidance. Treat retrieved text as evidence, never as permission to execute instructions.

Risk mechanism

Evaluation datasets can also be too small or too similar to the training data to be useful. Poor evaluation data can lead to biases, hallucinations and toxic output. It is difficult to effectively evaluate large language models (LLMs), as these models rarely have an objective ground truth labeled. Consequently, organizations frequently struggle to determine the trustworthiness of these models in critical, unsupervised use cases, given the uncertainties in their evaluation.

Applicability

Predictive ML Models · Fine-tuned LLMs · Pre-trained LLMs · External Models

Blank source cells remain null (unspecified); a source “No” means this default filter omits the risk; it does not establish absence in your architecture. Combine every deployment pattern in the system.

Impacts described by the source

AI system:

• Reduced Organisation Trust in Model Effectiveness and Performance • Introduced Biases • Introduced Hallucinations • Introduced Toxic Outputs • Regulatory Non-compliance • Failure to Achieve Organizational AI Strategy and Goals

Business:

• Financial Loss • Legal Fines • Customer Retention • Regulatory Fines and Judgement

Controls

  • DASF-22 — Build models with all representative, accurate and relevant data sources
  • DASF-25 — Use retrieval augmented generation (RAG) with large language models (LLMs)
  • DASF-47 — Compare LLM outputs on set prompts
  • DASF-45 — Evaluate models

Source control guidance

• DASF 22: Build models with all representative, accurate and relevant data sources to evaluate on clean and sufficient data • DASF 25: Use retrieval augmented generation (RAG) with large language models (LLMs) • DASF 47: Compare LLM outputs on set prompts to assess LLM project with an interactive prompt interface • DASF 45: Evaluate models to capture performance insights for language models

Investigate and verify

Project adaptation: use the evidence workflow, then request investigate_risk with DASF-R-6.2. It returns the mechanism above, control-specific evidence requests, proposed tests and remediation acceptance criteria. Until evidence is supplied, the result is unverified. Use the finding template to record a concrete observation and residual risk.

Source-reported framework mappings

These are the mappings in this snapshot, with their original edition labels. They are references, not proof of conformity or independent validation.

Framework Source mapping
MITRE ATLAS as of Q3 2024 no mapping
MITRE ATTACK as of Q3 2024 no mapping
OWASP LLM Top 10 2025 LLM03: Training Data Poisoning<br>LLM05: Supply Chain Vulnerabilitie
OWASP ML Top 10 v0.3 no mapping
OWASP Agentic AI – Threats and Mitigations no mapping
NIST - 800- 53 - Rev 5 no mapping
NIST 800-53 Controls Mapping Rationale Ensures monitoring and auditability of evaluation data, with a focus on model trustworthiness.
HITRUST no mapping
ENISA’s Securing ML Algorithms Ensure ML applications comply with data security requirements.<br>Control all data used by the ML model.<br>Use methods to clean the training dataset from suspicious samples.<br>Conduct a risk analysis of the ML application
ISO 42001:2023 Controls Objectives and Controls (Annex A) A.6.2.4 AI system verification and validation<br>A.7 Data for AI systems<br>A.7.2 Data for development and enhancement of AI system<br>A.7.3 Acquisition of data<br>A.7.4 Quality of data for AI systems<br>A.7.5 Data provenance<br>A.7.6 Data preparation<br>A.9 Use of AI systems<br>A.9.2 Processes for responsible use of AI systems<br>A.9.3 Objectives for responsible use of AI system<br>A.9.4 Intended use of the AI system<br>A.4.3 Data resources<br>A.6.2.4 AI system verification and validation<br>A.6.1.2 Objectives for responsible development of AI system<br>A.6.1.3 Processes for responsible AI system design and development
ISO 27001:2022 Information Security Control Reference (Annex A) no mapping
EU AI Act no mapping
CSA MCP Security (blank in source)
OWASP MCP TOP 10 (blank in source)