FREE GUIDE

The AI Vendor Risk Crosswalk Guide

12 questions to ask your AI vendors at signing and after, mapped to the NIST AI RMF and AI TIPS™ controls.

What’s inside

  • At signing Six questions on data, models, agents, notification, testing, and audit rights.
  • After signing Six questions to catch drift: model changes, access, ownership, and exit.
  • What a strong answer looks like For every question.
  • The Vendor Drift Test Three questions you can ask a vendor today.

Get the guide

Free PDF. Instant download.

Signing is not the end

Vendors change models, add agents, and add sub-processors. Many contracts do not require them to tell you.

Access and guardrails

Ask what a vendor’s AI can touch, and what it can do at runtime.

Mapped to frameworks

NIST AI RMF and AI TIPS™ controls for every question.

“A principle is a promise. Governance is the machinery that keeps the promise.”

From De-Risking AI Adoption: The AI Trust Layer: An AI Governance Playbook.

From Pamela Gupta

I am the Founder and CEO of Trusted AI and the creator of the AI TIPS™ framework. I have been helping organizations identify and manage AI risks since 2019, before most enterprises had an AI governance function.

This resource comes from my book, with forewords by Jim Reavis, Khwaja Shaik, and Dr. Paul Dongha. See the book.