The systematic process of identifying, assessing, and mitigating the risks associated with AI systems acquired or used from external vendors or service providers. This is a critical component of AI Risk Management and Due Diligence required of Deployers under the EU AI Act.

‍