Report Anomalous VIEWS CCM User Behavior
Description
The AI protects VA sensitive information from insider threat scenarios. Sensitive information includes the unauthorized disclosure of information such as financial records, Veteran information, and employee records stored in the Salesforce application titled "VA Integrated Enterprise Workflow Solution (VIEWS)." AI scans a CRM Analytics database consisting of Salesforce-generated log files to locate patterns of unusual end-user behavior (such as excessive after-hours logins and large, keyword searches (whistleblower, investigation, DD214, discharge, and similar terms) irregular database download attempts) and to automatically report such incidents to an email distribution group for action.
Detailed example
The AI system will provide automated alerts via email about specified security incidents for a distribution list of persons who have governance oversight of VIEWS database information and end-user operations within the Office of the Executive Secretariat.
AI / analytics pattern
Agentic AI: AI systems that perform tasks or make decisions autonomously with minimal human intervention.
Automation level / stage
a) Pre-deployment – The use case is in a development or acquisition status.
Expected benefit
The main benefit of this AI project is to provide improved, early incident detection for protecting VA employee and Veteran sensitive information, including PHI, PII, and Sensitive But Unclassified information stored in VIEWS.
Controls / human review
ATO: Not reported; PIA: Not published