Skip to content

Third-Party AI Risk Management

Categories: Risk & Assurance
Wishlist Share

About Course

Most organisations get most of their AI from third parties — vendors, foundation model providers, embedded features in existing software. This programme addresses the specific discipline of third-party AI risk management: how to identify third-party AI, how to assure it, how to contract for it, and how to manage its risks over time.

By the end you will be able to build a third-party AI register; design procurement processes that surface AI risk before contract signature; negotiate contracts that preserve compliance and audit rights; assure ongoing operation of third-party AI; and respond to third-party AI incidents effectively.

Structure

  • 7 modules
  • 28 CPD hours across 6-7 weeks
  • One summative assessment — a third-party AI risk framework and worked vendor assessment
Show More

What Will You Learn?

  • Build a third-party AI register that surfaces embedded AI.
  • Design procurement processes surfacing AI risk before contract.
  • Negotiate contracts preserving compliance and audit rights.
  • Assure ongoing operation of third-party AI.
  • Respond to third-party AI incidents effectively.
  • Manage concentration risk from foundation model dependencies.

Course Content

Module 1. The third-party AI risk landscape

  • Lesson 1.1: What third-party AI risk actually is
  • Lesson 1.2: AI Act value chain and vendor responsibility
  • Module 1 Check

Module 2. AI vendor risk assessment

Module 3. Ongoing monitoring of AI vendor relationships

Module 4. Concentration risk and ecosystem considerations

Module 5. Concentration risk and systemic considerations

Module 6. Exit and transition

Module 7. Drawing together and course close

Student Ratings & Reviews

No Review Yet
No Review Yet