← Policy gallery

rmf_manage_thirdparty_risks

ai-risk-management workflow pure_temporal ai-governancenistai-rmfrisk-managementmanagerag-amber

Risks from third-party AI resources (models, data, services) are identified and managed.

Formula

G(third_party_ai → P(thirdparty_risk_managed))

Why it matters

NIST AI RMF MANAGE 3: AI risks and benefits from third-party entities are managed.

Examples

passes the function's evidence is present

fails the required risk-management step is absent

Use it

ponens policies add rmf_manage_thirdparty_risks --into ./trace.json
ponens trace check ./trace.json