Full course coming soon

Third-Party Risk Management for AI Systems

7 chapters · 33 lessons

1. 1. Building AI Vendor Inventories

   4 lessons

   Create systematic discovery and tracking processes for AI systems, embedded capabilities, and supplier dependencies.

2. 2. Risk Assessment for AI Suppliers

   5 lessons

   Evaluate vendor risk based on data sensitivity, model autonomy, user impact, and supplier stability.

3. 3. Designing Risk-Based Controls

   5 lessons

   Match control requirements to risk levels, from approval gates to human review and data minimization.

4. 4. Continuous Monitoring and Change Detection

   5 lessons

   Implement monitoring systems that detect vendor capability changes, model updates, and risk signal shifts.

5. 5. Contract and Procurement Controls

   5 lessons

   Negotiate vendor agreements that address AI-specific risks, data rights, and change notification requirements.

6. 6. Managing Shadow AI and Employee Tools

   4 lessons

   Create safe patterns for employee AI use while preventing uncontrolled data exposure and compliance gaps.

7. 7. Audit Documentation and Evidence Management

   5 lessons

   Build audit-ready records of AI vendor decisions, assessments, monitoring, and control effectiveness.