As cited
Copy frozen at (site build).
Production data in testing is still common, and Tricentis’ CISO wants it gone
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
ai security
Production data in testing is still common, and Tricentis’ CISO wants it gone
Erika Dean, Chief Information Security Officer (CISO) at Tricentis, discusses the persistent practice of using production data in test environments and advocates for alternatives that are now sufficiently mature. She shares how her team identified a prompt injection vulnerability during red-teaming and delayed a release by one week to remediate it. Dean also outlines criteria for evaluating artificial intelligence (AI) vendors, noting that vague responses about data location and retention policies lead to rejection.
Why it matters: Security leaders and development teams should assess whether production data is unnecessarily exposed in test environments; Tricentis' experience shows that prompt injection risks in AI-assisted tools require active red-teaming and the willingness to delay releases for fixes.
- Source published
- First seen by Cybersecurity Tracker