Your Supplier's AI Is Your Risk
Failed to add items
Add to basket failed.
Add to Wish List failed.
Remove from Wish List failed.
Follow podcast failed
Unfollow podcast failed
Your Supplier's AI Is Your Risk
-
Narrated by:
-
By:
Most regulated organisations don't build AI. They buy it. In this episode of Making AI Adoption Auditable, Seán Murphy explains why "the vendor is responsible for that" is rarely the whole answer, and how compliance, risk and internal audit teams can test where their organisation really stands.
He covers the difference between provider and deployer under the EU AI Act, the deployer duties for high-risk systems and why almost all of them depend on the supplier, and the three ways a deployer can end up treated as the provider — including simply using a tool for a new purpose. He then sets out five things to sample: the role decision, the instructions for use, the contract, the silent model change, and whether human oversight is real. The episode closes with the four findings that come up most often and how to write them up for your audit or risk committee.