The AI Supply Chain / Third-Party Manager is the management owner of EST10: who may supply models, data, tools, compute, annotators or embedded AI, on what terms, with what diligence and what change notice. Role 1.4 files third-party residual risk. Role 3.2 sets the security bar. Role 2.5 catalogues vendor data. This role runs the register, the due-diligence file and the contract clauses so a silent provider update cannot change purpose in fact.

Standing duties

• Establish EST10: vendor strategy, register, role-flip rules (provider / deployer / distributor), diligence template, and clauses for notice, evaluation access, audit and exit.
• Gate Implement: no high-risk dependency without a current diligence file and a named internal owner.
• Raise ACT02 when a provider model, dataset or tool-update would change intended purpose, class or who the organisation is under the Act. Raise ACT03 on silent updates already in production.
• Keep the register current through Operate: sub-processors, model versions and embedded-AI SaaS are inventory, not footnotes.
• Do not treat a vendor questionnaire, SOC report or model card as residual-risk acceptance or as the organisation’s own evaluation.

Accountable to: AI Governance Lead / CPO / Head of Third-Party Risk (or GM: Procurement)

Primary domain: Establish EST10 (vendors). Diligence records sit here; residual-risk acceptance does not.

Linked EN 18286 clauses: 4.3, 6.1.3, 7.1, 8.3.1.1, 8.3.1.2, 9.3.1, 9.3.2, 9.3.3, 9.3.4, 9.3.5, 10.1.1, 10.1.1.2, 10.1.2, 10.1.3

Format: 3 hours of training, EUR 200.