Data exposure
Check whether client, personal, health, financial, or confidential data could be entered, processed, or retained by the AI tool.
See how to govern AI and vendor risk without a GRC platform.
Enter your email and download the guide instantly on the next page. The guide covers the Australian threat landscape, how vendors are scored, how data impact is classified and the complete vendor lifecycle.
- Why vendor & AI risk is now a board level issue
- How vendors are scored - the Vendor Trust Index (VTI)
- How data impact is classified (Business Impact Levels)
- The vendor lifecycle - onboarding, monitoring, offboarding
- Ten questions every board should ask management
NIST CSF 2.0 aligned
Get the free overview guide
Enter your work email and download the guide instantly on the next page.
Your email is used only to send the guide and occasional product updates. No spam. Unsubscribe anytime.
8
Plain-English pages
10
Questions for your board
PDF
Opens on any device
FREE
No purchase required
What you get
A practical first step before any AI tool approval.
The checklist gives you a practical first-pass record — data review, vendor evidence, account controls, Yes/No/Partial/N/A checks, escalation triggers, approval conditions and next-step decision notes.
Account type risks
Identify whether staff are using free or personal accounts that may allow vendor access to business data or lack enterprise controls.
Vendor terms
Flag whether the vendor's training, retention, privacy, and security terms have been reviewed and whether they are acceptable for your data types.
Output accountability
Confirm whether AI outputs are reviewed before use, who is accountable, and whether external use of AI-generated content is controlled.
See what's inside the guide
Eight plain-English pages covering the whole vendor lifecycle.
The overview guide walks you through the threat landscape, how vendors are scored using the Vendor Trust Index (VTI), how data impact is classified, and the ten questions every board should ask before approving an AI tool or SaaS vendor.
Sample layout from the AI & Vendor Risk Overview Guide. Full content delivered as PDF after email confirmation.
Want the complete approval workflow?
The checklist is the starting point. The Playbook is the full approval record.
The AI & Vendor Risk Playbook gives you a premium consolidated set of editable workflow artefacts that take you from the first vendor request through to a complete approval record with evidence, conditions, review dates and incident reporting. Evidence-led, not opinion-led.
Evidence review questionnaire
Evidence-led vendor and AI questions with red flags, confidence ratings, follow-up prompts and Australian reference points.
Risk triage decision workbook
Combines vendor input, AI/tool register, risk summary dashboard and remediation action tracking.
Approval playbook and decision record
Workflow guide, intake form, approval brief and lifecycle checklist designed to support documented due diligence and review.
Vendor Risk Assessment Report
Structured report template to document findings, risk ratings, evidence gaps and recommendations for each vendor review.
Cyber Incident Reporting Template
Front-end incident form for triage, scope, notifications, evidence and sign-off, aligned to the ACSC response workflow.
Once-off payment · no subscription · instant delivery
Free resource
Get the overview guide delivered to your inbox.
Enter your email and download the guide instantly on the next page.
Your email is used only to send the guide and occasional product updates. Unsubscribe anytime.