RT AI TOOLKIT

Section 3/5: Vendor Risk Issues

Your organisation may be engaging employees in the development and deployment of AI Systems when your organisation encourages employees to use AI Systems to increase productivity at work or uses AI Systems to manage employment relationships. 

1. Are your organisation’s contracts with vendors comprehensive in covering the ownership and rights over the data input into the AI Systems?

 
 
 
 
 

2. Are your organisation’s contracts with vendors comprehensive in covering the following issues regarding the data input into the AI Systems?

a) Contractual liability; and

b) Data protection/privacy?

 
 
 
 
 

3. Are your organisation’s contracts with vendors comprehensive in covering ownership and rights over the output generated by the AI Systems?

 
 
 
 
 

4. Are your organisation’s contracts with vendors comprehensive in covering the following issues regarding the output generated by the AI Systems?

a) Contractual liability; and

b) Data protection/privacy?

 
 
 
 
 

5. Is the acceptable use policy to which the organisation is subject aligned with the organisation’s business requirements?

 
 
 
 
 

6. Are your organisation’s contracts with vendors comprehensive in covering the cyber security posture of the AI Systems?

 
 
 
 
 

Question 1 of 6