Report Anomalous VIEWS CCM User Behavior

Overview

Development stage

In development or acquisitionSource: a) Pre-deployment – The use case is in a development or acquisition status.

High-impact designation

Not high-impactSource: c) Not high-impact

Impact justification

Not reported

Start date

Not reported

Withheld from public reporting

Not reported

Mission

Topic area

Cybersecurity

Operational functions

No function tag matched Derived by keyword rules; see methodology

Problem the AI is intended to solve

The AI protects VA sensitive information from insider threat scenarios. Sensitive information includes the unauthorized disclosure of information such as financial records, Veteran information, and employee records stored in the Salesforce application titled "VA Integrated Enterprise Workflow Solution (VIEWS)." AI scans a CRM Analytics database consisting of Salesforce-generated log files to locate patterns of unusual end-user behavior (such as excessive after-hours logins and large, keyword searches (whistleblower, investigation, DD214, discharge, and similar terms) irregular database download attempts) and to automatically report such incidents to an email distribution group for action.

Expected benefits

The main benefit of this AI project is to provide improved, early incident detection for protecting VA employee and Veteran sensitive information, including PHI, PII, and Sensitive But Unclassified information stored in VIEWS.

System outputs

The AI system will provide automated alerts via email about specified security incidents for a distribution list of persons who have governance oversight of VIEWS database information and end-user operations within the Office of the Executive Secretariat.

Technology

AI classification

Agentic AISource: Agentic AI: AI systems that perform tasks or make decisions autonomously with minimal human intervention.

System name(s)

Not reported

Custom-developed code

Not reported

Public source code

Not reported

Sourcing

How it was built

Not reported

Vendor (as reported)

Not reported

Vendors (standardized)

None on the standard list

A vendor is the supplier named by the agency. It does not identify the underlying model or AI technology.

Data and privacy

Involves PII

Not reported

Privacy Impact Assessment

Not reported

Authorization to Operate

Not reported

Demographic features

Not reported

Training and evaluation data

Not reported

Federal Data Catalog

Not reported

Governance

0 of 8 minimum-practice questions answered. A blank answer means the agency reported nothing; it does not mean the practice is absent.

Potential impacts and how they were identified

Not reported