Third-Party Risk Management (AI)

Third-party risk management for AI covers the governance of risks introduced by external AI vendors, foundation model providers, MCP server operators, and tool integrators. It includes vendor security assessments, contract review for data handling obligations, ongoing monitoring of third-party service behaviour, and contingency planning if a third-party dependency is compromised or discontinued.