A school district's IT director learns that students are using an AI app to generate realistic fake hall pass documents with staff signatures. What is the most appropriate first response?
- A.Notify school administration immediately and implement tamper-evident hall passes (serial numbers, QR codes verified against a central system) so that AI-generated copies cannot be authenticated
- B.Block access to all AI image generation sites on the school network
- C.Issue a school-wide email warning students that creating fake hall passes is a disciplinary offense
- D.Purchase a deepfake document detection scanner for office staff
Why A is correct
The root vulnerability is that hall passes rely on visual authenticity (signature appearance) which AI can now replicate. The fix is systemic: replace or supplement paper passes with cryptographically or digitally verifiable passes (QR codes tied to a central authorization database) that cannot be forged regardless of how good the visual simulation is. Network blocking is easily circumvented with personal devices. An email warning addresses behavior but not the technical vulnerability. Document detection scanners are impractical and expensive for a school setting and the threat model.
Know someone studying for AI Security Fundamentals? Send them this one.