Vendor due diligence
What does vendor due diligence cover in AI governance?
2 competencies are filed under it: AI vendor due diligence and third-party risk, Buying AI well. Each has its own page saying what it means in practice.
The competencies filed under it
- AI vendor due diligence and third-party risk
Tiers vendors by use and impact, requests evidence instead of promises, tests in the customer's context, and plans monitoring and exit.
Risk and Assurance
- Buying AI well
Writes requirements, runs a fair evaluation, pilots within limits, and refuses a demo as evidence.
Business and Transformation
Roles that ask for it
- Third-Party AI Risk Analyst2 of 2 competencies
- AI Vendor Risk Manager2 of 2 competencies
- Third-Party Cyber Risk Manager2 of 2 competencies
- Chief Information Officer, technology leadership edition2 of 2 competencies
- AI Controls Analyst1 of 2 competency
- AI Governance Analyst1 of 2 competency
- Cybersecurity Risk Analyst1 of 2 competency
- Governance Analyst1 of 2 competency
- GRC Associate (AI)1 of 2 competency
- Privacy Analyst1 of 2 competency
- AI Auditor1 of 2 competency
- AI Compliance Manager1 of 2 competency
- AI Governance Manager1 of 2 competency
- AI Privacy Engineer1 of 2 competency
- AI Product Manager, responsible product edition1 of 2 competency
- AI Program Manager1 of 2 competency
- AI Risk Manager1 of 2 competency
- Security Compliance Manager1 of 2 competency
- AI Security Architect1 of 2 competency
- Model Risk Manager1 of 2 competency
- Chief AI Officer1 of 2 competency
- Chief Audit Executive, AI audit edition1 of 2 competency
- Chief Compliance Officer, AI compliance edition1 of 2 competency
- Chief Information Security Officer, AI security focus1 of 2 competency
- Chief Risk Officer, AI risk edition1 of 2 competency
Where it is taught and graded
17 graded topics, each passed by explaining it back. The first module of every program is free with a free account.
- Module 7: Technology, Platforms and Vendors (5)
- Module 9: Risk, Resilience and Frontier AI (1)
- Module 18: Lab: Small Business and Owner Operator AI (1)
- Module 4: Practical AI Workflow Design and Prompt Engineering (1)
- Module 6: AI in the Workplace and Team Leadership (1)
- Module 11: Bonus: AI Leadership Accelerator (1)
- Module 12: Bonus: SMB AI Adoption Path (2)
- Module 3: Shipping AI and Surviving the Incident (2)
- EU AI Act Implementation Expert2 topics
- Module 2: AI System Inventory and Classification (1)
- Module 7: Regulatory Interplay and Liability (1)
- Module 5: AI Law in Practice: The Compliance-to-Persuasion Toolkit (1)
Questions
- What does vendor due diligence cover in AI governance?
- 2 competencies are filed under it: AI vendor due diligence and third-party risk, Buying AI well. Each has its own page saying what it means in practice.
- Which roles ask for vendor due diligence?
- 25 roles on the map name at least one of its competencies, from analyst seats to executive ones. Each role page lists the depth expected.
- Where is vendor due diligence taught and graded?
- 17 graded topics teach it across 5 programs. Each topic is graded by explaining it back against its own transcript, so a pass is evidence, not attendance. The first module of every program is free with a free account.