What's in "A.I. and Third-Party Risk" Book?

Let us reveal what the Table of Contents currently looks like and explain a bit about each section:

Chapter 1: AI & Third Party Risk

• Disruptive Times: Sets the stage for why we are writing the book, that AI risk is a significant challenge for TPRM programs.
• AI and History: General overview in business English about history, basics, lifecycle, types of AI, prompts, and agents.
• AI Risks in Real Life: Provide a few examples of what bad has happened with AI already in the real world.
• Risk: What is it, how is it measured?
• Third-Party Risk: An overview of what it is, a risk-based approach, frameworks, TPRA TPRM 101 Guidebook, and Interagency Guidance.

Chapter 2: AI in Vendors

• Risk of AI with Vendors: What are the unique risks from AI we need to be looking for from our vendors?
• How to Assess AI Risk in a Vendor: Frameworks and how to leverage them for assessments of AI risk
• Major AI RMF: An overview of the major AI Risk Management Frameworks and a deeper dive into the NIST AI RMF.
• AI by TPRM Phase: By each phase, we discuss how a TPRM team would assess a vendor.
• Use Case (AI SaaS): We take a fake company that provides online HR software that has AI capabilities and do a phase-by-phase analysis of them as if they were our vendor.

Chapter 3: AI: Now and Future in TPRM

• AI use in TPRM: Some use cases are discussed on how TPRM can leverage AI to increase productivity and risk identification. Then we dive into how to 'future-proof' your career with some learning and certification advice.
• Regulatory Guidance for AI: We list and explain all the major AI regulations by country, as well as the major international initiatives and cooperation.

We hope this ToC listing reveals a wide coverage of the topics. Feel free to message me, and we can talk about whether it needs to be added or if it is already there (just not in the ToC listing above).