When outsourcing AI projects or procuring off-the-shelf products or external data, the organisation defines requirements that include ethical considerations, plans the procurement, avoids vendor lock-in, assesses supply chain risks and diversity, agrees intellectual property terms, and performs a risk assessment of the third-party provider's credibility and reliability as part of due diligence, including for custom AI developed by a vendor.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.