The data Preparation phase-covering sourcing, collection, labeling, cleansing, and provenance-presents the greatest inherent risk because it is where privacy, consent, representativeness, bias, quality, lineage, and legality must be established. Decisions and defects here propagate into training and downstream use, amplifying ethical, regulatory, and accuracy risks.
While Training can introduce additional risks (e.g., poisoning, leakage), these are frequently mitigated by controls that depend on having trustworthy prepared data. Monitoring and Maintenance are later-life-cycle phases oriented toward detection and correction; they are critical but inherently rely on the foundation set during Preparation.
References: AI Security Management™ (AAISM) Body of Knowledge: "AI Data Lifecycle Risks-Sourcing, Consent, Provenance, and Bias," "Risk Treatment Priorities Across the Lifecycle"; AAISM Study Guide:
"Data Preparation Controls and Quality Gates," "Bias and Privacy Risk Controls at Ingestion."

AAISM defines data poisoning as intentional manipulation of the training data to influence model behavior or outputs. Corrupting training data (D) is the exact definition of this attack type.
Noise injection (A) is model degradation testing. Model theft (B) is exfiltration. Encrypted data (C) is irrelevant.
References: AAISM Study Guide - AI Threats; Data Poisoning Attacks.

Model drift occurs when the statistical properties of input data and/or the relationship between features and outcomes change over time, causing degraded model performance. The AAISM guidance classifies data- centric causes (distribution shift, concept drift, and contamination) as the primary drivers and highlights that malicious contamination of training or incremental learning data (data poisoning) is a direct, high- likelihood driver of observable drift in production because it changes the effective data-generating process the model learns from. In contrast:
* Perfect knowledge is an attacker capability descriptor, not a drift cause.
* Membership inference targets privacy of the training set and does not inherently shift data distributions.
* Model stealing targets IP/confidentiality; it does not change the victim model's data distribution or decision boundary in situ.
References:* AI Security Management (AAISM) Body of Knowledge: Model Risk & Drift; Data Integrity Risks; Adversarial ML-Poisoning vs. Evasion* AAISM Study Guide: Production Monitoring & Drift Management; Risk Scenarios-Data Poisoning Impacts and Controls* AAISM Mapping to Standards:
Lifecycle Risk Treatment-Robustness to Data Contamination; Continuous Monitoring and Feedback

Third-party audit reports provide independent assurance that the vendor's stated controls are designed and operating effectively against recognized criteria. Such attestations (e.g., audit/assurance frameworks) are traceable, repeatable, and verifiable, and they support supply-chain risk reviews and contractual assurance.
Internal red-team reports are not independent, industry "peer reviews" are not control attestations, and whitepapers are marketing/educational materials without evidence of control operation.
References: AI Security Management™ (AAISM) Body of Knowledge: Third-Party & Supply-Chain Assurance; Independent Assessment and Audit Evidence; Vendor Risk Management. AAISM Study Guide:
Assurance Artifacts for AI Services; Evaluating External AI Providers.

The first action, before any processing of personal data for AI-driven profiling and targeted communications, is to establish a lawful basis for processing. Under AAISM-aligned privacy governance, explicit and informed consent is prioritized for new or sensitive uses such as interest profiling and targeted marketing. Consent ensures purpose limitation, transparency, and user control prior to model ingestion and campaign activation.
Training teams, updating terms of service, or verifying contact details are important, but they do not provide legal authority to process data; therefore, they follow after consent is obtained.
References: AI Security Management™ (AAISM) Body of Knowledge - Privacy Governance and Lawful Basis; Purpose Limitation and Transparency; Consent Management in AI-enabled Marketing. AAISM Study Guide - Data Protection Controls for AI Profiling; Consent Capture and Record-Keeping.