Unit 7: Managing Vendor Risk – Compliance When You Don’t Own the Tool
Your procurement or legal team should help update contracts to include:
Right to request documentation or audits
Vendor responsibility for AI-related failures
Reporting timelines for system changes or errors
Data handling and deletion commitments
Co-ownership or clear delineation of compliance duties
📌 Good contracts don’t just manage cost — they manage risk.
