Frameworks describe them slightly differently, but common categories are security risks such as data leakage or model attacks, privacy risks, compliance and legal risks, and operational or reliability risks like biased or inaccurate outputs. When a vendor uses AI, each of these can flow into your organization. Assessing how third parties build and govern their AI is now a core part of third party risk management.
