← Lead & Assurance
Module 5 of 7 · 15 min
Stage 5 · Review, challenge and mentor

Complex supply-chain and GPAI scenarios

Lead assurance where multiple providers, models and downstream systems interact.

Learn

Map the model supply chain, downstream system providers, deployers, importers/distributors and relevant third parties before testing obligations.

Identify where required information or evidence must flow between parties and where contracts do not support that flow.

Test change notification and incident communication across organisational boundaries.

Remember
  • •Map the chain before auditing it.
  • •Information duties cross contracts.
  • •Test change and incident flows.
Client practice

Review a fictional SaaS product using two GPAI models and three downstream vendors.

Evidence you should be able to produce
Supply-chain assurance mapContract/evidence gapsEscalation actions
Source basis

EU AI Act GPAI/supply-chain concepts plus ISO/IEC 42001 third-party governance themes.

← Previous moduleNext module →