Vendor due diligence
What does vendor due diligence cover in AI governance?
2 competencies are filed under it: AI vendor due diligence and third-party risk, Buying AI well. Each has its own page saying what it means in practice.
The competencies filed under it
- AI vendor due diligence and third-party risk
Tiers vendors by use and impact, requests evidence instead of promises, tests in the customer's context, and plans monitoring and exit.
Risk and Assurance
- Buying AI well
Writes requirements, runs a fair evaluation, pilots within limits, and refuses a demo as evidence.
Business and Transformation
Roles that ask for it
- Third-Party AI Risk Analyst2 of 2 competencies
- AI Vendor Risk Manager2 of 2 competencies
- Third-Party Cyber Risk Manager2 of 2 competencies
- Chief Information Officer, technology leadership edition2 of 2 competencies
- AI Controls Analyst1 of 2 competency
- AI Governance Analyst1 of 2 competency
- Cybersecurity Risk Analyst1 of 2 competency
- Governance Analyst1 of 2 competency
- GRC Associate (AI)1 of 2 competency
- Privacy Analyst1 of 2 competency
- AI Auditor1 of 2 competency
- AI Compliance Manager1 of 2 competency
- AI Governance Manager1 of 2 competency
- AI Privacy Engineer1 of 2 competency
- AI Product Manager, responsible product edition1 of 2 competency
- AI Program Manager1 of 2 competency
- AI Risk Manager1 of 2 competency
- Security Compliance Manager1 of 2 competency
- AI Security Architect1 of 2 competency
- Model Risk Manager1 of 2 competency
- Chief AI Officer1 of 2 competency
- Chief Audit Executive, AI audit edition1 of 2 competency
- Chief Compliance Officer, AI compliance edition1 of 2 competency
- Chief Information Security Officer, AI security focus1 of 2 competency
- Chief Risk Officer, AI risk edition1 of 2 competency
Where it is taught and graded
31 graded topics, each passed by explaining it back. The first module of every program is free with a free account.
- Module 7: Technology, Platforms and Vendors (4)
- Module 8: Governance and Responsible AI (1)
- Module 9: Risk, Resilience and Frontier AI (1)
- Module 15: Lab: Regulated Industries (1)
- Module 11: Cybersecurity Governance and Operational Resilience (1)
- Module 12: Third-Party, Supply-Chain, and Concentration Risk (3)
- Module 17: AI Governance, AI Risk, AI Security, and AI Assurance (2)
- Module 3: Shipping AI and Surviving the Incident (3)
- Module 5: The EU AI Act: The Executive Map (1)
- Module 4: Practical AI Workflow Design and Prompt Engineering (1)
- Module 11: Bonus: AI Leadership Accelerator (1)
- Module 12: Bonus: SMB AI Adoption Path (1)
- EU AI Act Implementation Expert3 topics
- Module 2: AI System Inventory and Classification (2)
- Module 7: Regulatory Interplay and Liability (1)
- Module 3: Bounding by Design (1)
- Module 6: Testing and Red-Teaming (1)
- Module 3: Generative AI Compliance (1)
- Module 5: Data Security for AI (1)
- Module 8: Learning How to Learn (1)
- Module 9: Frontier and Future Horizons (1)
- Module 5: Poison, Leaks, and the Adversary (1)
- Senior AI Scam Defense1 topic
- Module 11: CSFDP: Facility Protocols and Incident Command (1)
Questions
- What does vendor due diligence cover in AI governance?
- 2 competencies are filed under it: AI vendor due diligence and third-party risk, Buying AI well. Each has its own page saying what it means in practice.
- Which roles ask for vendor due diligence?
- 25 roles on the map name at least one of its competencies, from analyst seats to executive ones. Each role page lists the depth expected.
- Where is vendor due diligence taught and graded?
- 31 graded topics teach it across 10 programs. Each topic is graded by explaining it back against its own transcript, so a pass is evidence, not attendance. The first module of every program is free with a free account.