How to Prepare for AI Questions in Customer RFPs
AI-use disclosures are increasingly appearing in customer RFPs, vendor reviews, and contract negotiations, and suppliers that cannot explain how AI systems handle sensitive data risk delayed or lost business. A Drata survey found only 37% of IT and security professionals were highly confident they could identify AI use in vendors' products and services, while 42% had a standard process for assessing third-party AI risk. The article recommends inventorying employee and provider AI use, tracing where customer data goes, assigning an owner for consistent disclosures, training sales teams, and spelling out data handling and model-training terms in vendor contracts. Companies should maintain current records and be prepared to demonstrate that customer data can be exported or deleted.
أسلوب التغطيةإخباري
Primarily factual business guidance, with some advisory recommendations.