LESSON 4
The Knowledge Transfer Risk Assessment
How much of your expertise have you already given away? This lesson gives you a concrete scoring system to audit your exposure — and a framework to reduce risk starting today.

THE C×T×E FRAMEWORK
Knowledge Awareness Scoring
Rate each AI interaction across three dimensions. Multiply them. The score tells you exactly how to handle that interaction.
- C — Content (1-4): 1=Public, 2=Internal, 3=Confidential, 4=Trade Secret
- T — Tool Sensitivity (1-4): 1=Enterprise IT-managed, 2=Approved cloud, 3=Personal account, 4=Unvetted
- E — Exposure (1-3): 1=Fully redacted, 2=Partially sanitized, 3=Raw data
- Scoring: 1-8: ✅ Low | 9-16: 🟡 Sanitize | 17-32: 🔴 HIGH | 33+: ⛔ STOP

CASE STUDY
The Samsung Code Leak
Samsung engineers pasted source code into ChatGPT. C×T×E score: 4×3×3 = 36 ⛔. A score that should have stopped them cold.

The Incident
- Action: Engineers pasted semiconductor source code into ChatGPT
- Also: Internal meeting transcripts shared for summarization
- Result: Data entered ChatGPT's training pipeline

The Consequences
- Ban: Total ban on public generative AI tools
- Action: 3 employees faced disciplinary action
- Cost: Months of engineering time to audit exposure
THE DATA
The Numbers Are Eye-Opening
Employees are sharing far more data with AI tools than employers realize — and much of it is sensitive.
11%
of data pasted into ChatGPT is confidential corporate info
Source: Cyberhaven
22%
of data pastes contain PII or payment card data
Source: The Register