Which AI governance roles ask for AI vendor due diligence and third-party risk?

24 roles on the map name it, and it is core to Third-Party AI Risk Analyst, AI Vendor Risk Manager, Third-Party Cyber Risk Manager, Chief Information Officer, technology leadership edition.

How do I learn and prove AI vendor due diligence and third-party risk?

22 graded topics teach it across 9 programs. Each topic is graded by explaining it back against its own transcript, so a pass is evidence, not attendance. The first module of every program is free with a free account.

What interview question tests AI vendor due diligence and third-party risk?

A business unit wants to buy an AI tool next week. What do you ask the vendor, what evidence do you require, and what would make you say no? A strong answer shows the practice itself: Tiers vendors by use and impact, requests evidence instead of promises, tests in the customer's context, and plans monitoring and exit.

AI vendor due diligence and third-party risk

Risk and Assurance

What is AI vendor due diligence and third-party risk?

Tiers vendors by use and impact, requests evidence instead of promises, tests in the customer's context, and plans monitoring and exit.

Where the frameworks place it: NIST AI RMF GOVERN 6 and MANAGE 3; ISO/IEC 42001 Annex A supplier controls.

The interview question it draws

A business unit wants to buy an AI tool next week. What do you ask the vendor, what evidence do you require, and what would make you say no?

A strong answer walks through the practice itself, with one real case, what you decided, and what the evidence showed afterwards.

Roles that ask for it

Third-Party AI Risk Analystcore, depth expected
AI Vendor Risk Managercore, depth expected
Third-Party Cyber Risk Managercore, depth expected
Chief Information Officer, technology leadership editioncore, depth expected
AI Governance Analystrequired, working knowledge
Cybersecurity Risk Analystrequired, working knowledge
Governance Analystrequired, working knowledge
GRC Associate (AI)required, working knowledge
Privacy Analystrequired, working knowledge
AI Governance Managerrequired, working knowledge
AI Program Managerrequired, working knowledge
AI Risk Managerrequired, working knowledge
AI Security Architectrequired, working knowledge
Chief Audit Executive, AI audit editionrequired, working knowledge
Chief Compliance Officer, AI compliance editionrequired, working knowledge
Chief Information Security Officer, AI security focusrequired, working knowledge
Chief Risk Officer, AI risk editionrequired, working knowledge
AI Controls Analystpreferred, working knowledge
AI Auditorpreferred, working knowledge
AI Compliance Managerpreferred, working knowledge
AI Privacy Engineerpreferred, working knowledge
Security Compliance Managerpreferred, working knowledge
Model Risk Managerpreferred, working knowledge
Chief AI Officerpreferred, working knowledge

Backgrounds that already carry it

Privacy and data protection (described, not yet shown)
Processor and vendor review is routine privacy work.
Cybersecurity and IT (described, not yet shown)
Supplier security assessment is routine.
Nonprofit program and grants oversight (described, not yet shown)
Reviewing grant and vendor agreements for data terms is vendor review.

Where it is taught and graded

22 graded topics, each passed by explaining it back. The first module of every program is free with a free account.

Certified Enterprise Governance, Risk and Compliance Professional (CEGP)6 topics
- Module 11: Cybersecurity Governance and Operational Resilience (1)
- Module 12: Third-Party, Supply-Chain, and Concentration Risk (3)
- Module 17: AI Governance, AI Risk, AI Security, and AI Assurance (2)
Certified AI Transformation Professional (CATP)5 topics
- Module 7: Technology, Platforms and Vendors (2)
- Module 8: Governance and Responsible AI (1)
- Module 9: Risk, Resilience and Frontier AI (1)
- Module 15: Lab: Regulated Industries (1)
Certified AI Governance Professional (CAIGP)2 topics
- Module 3: Shipping AI and Surviving the Incident (1)
- Module 5: The EU AI Act: The Executive Map (1)
Certified Agentic AI Governance Professional (CAAGP)2 topics
- Module 3: Bounding by Design (1)
- Module 6: Testing and Red-Teaming (1)
EU AI Act Implementation Expert2 topics
- Module 2: AI System Inventory and Classification (1)
- Module 7: Regulatory Interplay and Liability (1)
Certified China AI Regulatory Professional (CCARP)2 topics
- Module 3: Generative AI Compliance (1)
- Module 5: Data Security for AI (1)
Certified AI Practitioner: Workplace Foundations1 topic
- Module 11: Bonus: AI Leadership Accelerator (1)
Certified AI Data Governance Professional (CADGP)1 topic
- Module 5: Poison, Leaks, and the Adversary (1)
Senior AI Scam Defense1 topic
- Module 11: CSFDP: Facility Protocols and Incident Command (1)

Check my readiness for a role Start the first module free

Questions

What is AI vendor due diligence and third-party risk?: Tiers vendors by use and impact, requests evidence instead of promises, tests in the customer's context, and plans monitoring and exit.
Which AI governance roles ask for AI vendor due diligence and third-party risk?: 24 roles on the map name it, and it is core to Third-Party AI Risk Analyst, AI Vendor Risk Manager, Third-Party Cyber Risk Manager, Chief Information Officer, technology leadership edition.
How do I learn and prove AI vendor due diligence and third-party risk?: 22 graded topics teach it across 9 programs. Each topic is graded by explaining it back against its own transcript, so a pass is evidence, not attendance. The first module of every program is free with a free account.
What interview question tests AI vendor due diligence and third-party risk?: A business unit wants to buy an AI tool next week. What do you ask the vendor, what evidence do you require, and what would make you say no? A strong answer shows the practice itself: Tiers vendors by use and impact, requests evidence instead of promises, tests in the customer's context, and plans monitoring and exit.