MANAGE 3.1 Monitoring third-party risks and controls
Regularly monitoring AI risks and benefits from third-party resources and applying and documenting risk controls: vendor documentation, TEVV of third-party systems, vulnerability reporting and decommissioning systems beyond tolerance.

