Data Poisoning

Assessment

Detailed Explanation

Data poisoning is a type of attack where an adversary deliberately corrupts the data used to train an AI model, causing the model to learn incorrect patterns or behave in unintended ways. Unlike adversarial attacks that target a deployed model's inputs, data poisoning targets the training process itself, potentially affecting every prediction the model makes. Data poisoning can be difficult to detect because the corrupted data may appear normal and the model may perform well on standard test sets while containing hidden vulnerabilities. Defenses include training data validation, anomaly detection in data pipelines, data provenance tracking, and multi-source data verification. In the COMPEL risk taxonomy, data poisoning is classified as a data risk with potentially severe consequences for high-risk AI applications.

Why It Matters

Understanding Data Poisoning is essential for organizations pursuing responsible AI transformation. In the context of enterprise AI governance, this concept directly impacts how organizations design, deploy, and oversee AI systems particularly within the Governance pillar. Without a clear grasp of Data Poisoning, organizations risk creating governance gaps that undermine trust, compliance, and long-term value realization. For AI leaders and practitioners, Data Poisoning provides the conceptual foundation needed to make informed decisions about AI strategy, risk management, and stakeholder engagement. As regulatory frameworks such as the EU AI Act and standards like ISO 42001 mature, proficiency in concepts like Data Poisoning becomes not merely advantageous but operationally necessary for any organization deploying AI at scale.

COMPEL-Specific Usage

Assessment concepts underpin the evidence-based approach of the COMPEL framework. The Calibrate stage uses assessment methodologies to establish baselines, while the Evaluate stage applies them to measure progress. COMPEL mandates that every governance decision be grounded in assessment data, not assumptions, ensuring transformation roadmaps address verified gaps. The concept of Data Poisoning is most directly applied during the Calibrate and Evaluate stages of the COMPEL operating cycle. Practitioners preparing for COMPEL certification will encounter Data Poisoning in coursework aligned with the Governance pillar, and should be prepared to demonstrate applied understanding during assessment activities.

Related Standards & Frameworks

ISO/IEC 42001:2023 Clause 9.1 (Monitoring and Measurement)
NIST AI RMF MEASURE function