×Cross-cutting

ISO 42001Supplier Assurance

Supplier Assurance

Purpose

Assurance over a supplier contributing AI systems, services or resources: obligations, attestations, versions, risk and evidence.

Role

ISO/IEC 42001 Annex A.10.3 requires appropriate governance for suppliers contributing AI systems, services or resources. Govern Dependencies is the architectural principle; this profile is the missing domain object. ISO/IEC 27001 treats suppliers as a profile under Governed Resource rather than a first-class type here.

This page is a stub: fields, examples and schema are still to be specified.

Links upstream

• AI System
• Dataset
• Tool Resource
• Party Register

Links downstream

• Governance Contract
• Risk Assessment
• Control

Related factors

• Govern Dependencies
• Governance Is Composable

References

• ISO/IEC 42001 Analysis — Annex A.10.3