SOC analysts pasting incident data into AI tools for triage and the data handling implications were never in the policy

Found this during a routine review. Analysts discovered that pasting alert context into an AI tool cut triage time significantly and started doing it because it worked, which is a reasonable thing to do when you are unde