Effectively Assessing Vendor AI Risk - VRM 201

Explore effective strategies for assessing vendor AI risk in this 37-minute conference talk from BSides SATX. Delve into the challenges of evaluating AI-related risks within vendor risk management (VRM) programs. Learn how to adapt existing VRM frameworks to include AI considerations without reinventing the wheel. Discover new tools and creative approaches, including the NIST AI Risk Management Framework, ISO standards 23053 and 42001, contractual considerations, and legislation like the EU-AI Act. Gain insights on reducing AI risk in the VRM process, assessing third-party AI risk, and managing AI-related risks from supply chains. Acquire practical knowledge on implementing AI risk assessment tools that are cost-effective and maintain healthy business relationships with vendors.