Skip to content
The El Paso

AI vendors can change their risk profile between reviews, and most oversight programs never notice

AI vendors can change their risk profile between reviews, and most oversight programs never notice
Photo: KVIA ABC-7 · view original

Organizations often treat AI adoption as a business decision, overlooking its third-party risk management (TPRM) implications. As a result, AI tools are frequently deployed outside procurement and security oversight, creating governance gaps that become harder to manage as risks evolve. This chal...

Sources and story details