MediumMonitoring Gap◐Demonstrated
Inadequate monitoring & incident response
Governance, Accountability & ComplianceDescription
Lack of runtime monitoring/logging means failures, abuse, or harm go undetected and unhandled.
Example scenario
A guardrail silently fails for days before a customer complaint surfaces it.
Real-world evidence◐Demonstrated
Model drift and lifecycle failures are well-documented in academic literature and post-incident reviews (e.g., COVID-driven model degradation), but confirmed production incidents where inadequate decommissioning or version control was the primary causal factor in a material loss event are not yet a settled category.
Primary mitigations
- Output & usage logging
- anomaly detection
- incident runbooks
- alerting
- periodic review.
Detection signals
Monitoring-coverage metric; mean-time-to-detect; incident drill results.
Mitigating controls
6 Non-agentic controls
ZYC-SYSG-001Non-Agentic
Drift Resilience
System Governance
ZYC-ACCT-001Non-Agentic
Human-in-the-Loop
Accountability & Oversight
ZYC-LEGAL-001Non-Agentic
AI Regulation Compliance
Legal Compliance
ZYC-AUDIT-001Non-Agentic
Extraction Failure Logging
Auditability
ZYC-ACCT-003Non-Agentic
Fairness Escalation
Accountability & Oversight
ZYC-AUDIT-003Non-Agentic
Log Immutability
Auditability