Overview/Register/Third-Party & Data Risk
Third-Party & Data Risk
Examine the vendors and the data that AI systems touch, and control what leaves the organisation.
Tab E Services in this area
| Ref | Service | What it does |
|---|---|---|
| TP-01 | Third-Party / Vendor AI Risk Assessment | Makes criteria to examine vendors that use AI on your data. Assesses those vendors. |
| TP-02 | AI Data Security & DLP for AI | Finds sensitive data in AI prompts, uploads and responses. Sets controls to block, hide or label it. |
| TP-03 | AI Privacy & Data Protection Advisory | Maps personal data in AI systems. Sets privacy controls, consent and consumer rights for automated decisions. |
In detail Third-Party & Data Risk
-
TP-01
Third-Party / Vendor AI Risk Assessment
Makes criteria to examine vendors that use AI on your data. Assesses those vendors.
Deliverables: AI vendor questionnaire · vendor risk ratings · list of contract clauses
-
TP-02
AI Data Security & DLP for AI
Finds sensitive data in AI prompts, uploads and responses. Sets controls to block, hide or label it.
Deliverables: Data flow map · DLP and labeling rules · DSPM setup
-
TP-03
AI Privacy & Data Protection Advisory
Maps personal data in AI systems. Sets privacy controls, consent and consumer rights for automated decisions.
Deliverables: AI data map · privacy impact assessment · opt-out and rights workflows
We are not accepting new clients at present, so no briefing is running on Third-Party & Data Risk. The services in this area are described above.
Read the availability note