Generative AI at Work / Unit 7 GAI 161 short lesson, about 20 seconds
Due Diligence for AI Vendors
Captions available
The idea
NIST's profile says standard third-party controls apply to AI vendors: procurement due diligence, software bills of materials, service level agreements, and independent attestation reports.
In practice
A purchasing checklist asking an AI vendor for its component list and an audit report.
Where people slip
AI does not need a new procurement process so much as the existing one applied in full.
Your place on the trail
Every lesson rests on earlier ones and opens later ones. Tap any to jump.
Something wrong in this lesson? Flag it · Sources for Generative AI at Work