Third-party AI assessment and exit plan
Each outside AI provider is assessed, with a tested plan to switch away or work without it.
Layer L3 Application · Owner Deployer · Family Supply chain
Effective
Not effective
Not effective (bypassed)
Did not exist
By risk
| Risk | Incidents where the control was not effective or did not exist | Incidents where the control was effective | Incidents where sources don't mention the control |
|---|---|---|---|
| Provider concentration or outage |
Why it was not effective
No incident yet records this control as not effective.
Incidents where it was not effective or did not exist per day
0 on 1 Nov 2026; average of the 7 days before: 0.
0 of 3 incidents in 1 Nov 2026 have been read for controls.
Added in reported fixes, and what followed
No reported fix names this control yet.
Frameworks
| Standard | Clause | Requirement |
|---|---|---|
| NIST SP 800-53 | SR-6 | To verify when the text is stored |
| EU DORA | Art. 28 | To verify when the text is stored |