SIG (Shared Assessments)
SIG risk domains (2024 release) – SIG (Shared Assessments)

SIG (Shared Assessments) R: Govern the third party's use of artificial intelligence in the service

What does R require?

SIG risk domain R, Artificial Intelligence. Added in the 2024 SIG, this domain assesses how the third party governs and deploys AI and the models it uses to deliver or support the service, and the harms to people, organisations or ecosystems that ungoverned use can cause, such as bias, accuracy, transparency, intellectual property, privacy and supply chain risk, with each use case assessed against the type and sensitivity of the data. The 2024 SIG maps it to NIST AI 100-1 and the 2026 release adds ISO/IEC 42001.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in SIG risk domains (2024 release) – SIG (Shared Assessments)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll SIG (Shared Assessments) controls