Australia Guidance for AI Adoption (2025) 3.1.2: 3.1.2 Manage risks from third parties and open-source AI

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Practice 3: Measure and manage risks – Australia Guidance for AI Adoption (2025)

• 3.1.1 3.1.1 Create an AI risk management framework, risk criteria and assessment processes
• 3.1.3 3.1.3 Report risk outcomes in consistent formats
• 3.2.1 3.2.1 Triage AI systems for enhanced or unacceptable risk
• 3.2.2 3.2.2 Assess each AI system's risks
• 3.2.3 3.2.3 Evaluate likelihood and consequence, including of not deploying
• 3.3.1 3.3.1 Plan and implement risk treatment and verify it
• 3.3.2 3.3.2 Communicate risk treatment plans
• 3.3.3 3.3.3 Plan response and recovery for residual risk