AI and Third-Party Risk

Artificial Intelligence is no longer a future concern—it’s a present-day disruptor. As vendors and partners increasingly adopt AI-enabled products and services, third-party and supply-chain risk professionals face a new challenge: managing a rapidly evolving risk landscape with limited guidance. This book delivers the clarity and structure needed to navigate that complexity. Designed for business professionals—not just technologists—this practical guide walks readers through the full lifecycle of AI-related vendor risk, from intake to offboarding. With hands-on examples, actionable templates, and real-world use cases, it equips readers to assess and manage AI risk confidently, even in environments without dedicated IT security teams. It also explores how AI can be used within TPRM programs to enhance efficiency and accuracy. As regulatory frameworks around AI continue to emerge and evolve, this book provides timely insight into compliance expectations and how they impact risk programs and leadership. Whether you're a seasoned risk manager or new to the field, you’ll find concise, jargon-free guidance that respects your time and delivers immediate value. AI may be complex, but managing its risk doesn’t have to be. This book transforms confusion into clarity, helping you turn disruption into opportunity—and build a resilient, future-ready risk management program. What You Will Learn: How to measure risk and risk-based approaches. Third-party risk frameworks. How to assess the risk of AI with vendors. Major AI risk management frameworks. Regulatory guidance for AI--a country-by-country analysis.