digital-innovation
Security Risks When AI Reads External Documents: Work Design to Prevent Prompt Injection
This article explains prompt injection from a business perspective, detailing how instructions in external documents affect AI behavior. Based on OWASP guidelines, it outlines the boundaries for least privilege, intermediate result reviews, and approval with logging.

This article explains prompt injection from a business perspective, detailing how instructions in external documents affect AI behavior. Based on OWASP guidelines, it outlines the boundaries for least privilege, intermediate result reviews, and approval with logging.
When AI goes beyond simply summarizing emails to sending them and modifying business systems, the nature of security questions also changes. This is because, alongside the ability to generate accurate answers, it becomes crucial to determine what information the AI can read and what actions it can take.…
KBR Access
Insight 4.0 content is available to Standard members and above
This content is available to Standard members and above. Standard unlocks general membership content including Insight 4.0, Policy Insight, and Global Radar.
FREE ACCOUNT · NO CARD REQUIRED
Create a free KBR account
Creating a KBR account is free and takes about a minute — no card required. You'll come straight back to this page once you're done.
KBR NEWSLETTER
Sign up for free and get the KBR Newsletter!
Sign up and opt in to the newsletter to receive KBR's curated business and economic insights by email.
RELATED CONTENT
Related Content
Why Skill Gaps Persist Even When Employee Training Increases: The Difference in Time and Opportunity Viewed Through OECD Adult Learning Data
StandardEmployee Feedback is Frequent, but Why Does Performance Remain the Same? Connecting Assessments to Behavioral Change
StandardWhy Customers Say It's Good Yet Don't Buy… Questions Missed During Startup Customer Validation
StandardA Meeting Without Objections Is Not Necessarily a Good Meeting: The Crucial Signals Leaders Miss
StandardThe First 90 Days of a New Leader: What Needs to Change — Establishing Standards for Learning, Expectation Alignment, and Delegation Before Rushing into Results

