AI Assurance Institute Logo AI Assurance Institute

Supplier Control under EN 18286

Managing Third-Party Risks in High-Risk AI QMS

Overview

This intensive 1-day hands-on workshop focuses on Clause 8.4 (Control of externally provided processes, products and services) of EN 18286 - one of the most critical and AI-specific sections of the standard. It requires organisations to evaluate, select, monitor, and re-evaluate every supplier of datasets, foundation models, tools, plugins, or cloud services feeding into high-risk AI systems.

You will leave with ready-to-deploy supplier evaluation scorecards, contractual language, monitoring dashboards, and a 30-day supplier oversight plan.

What You Will Learn

By the end of this workshop, participants will be able to:

  • Map EN 18286 Clause 8.4 requirements to AI supply-chain risks such as model poisoning, dataset tampering, and API compromise
  • Design risk-based supplier evaluation and selection criteria tailored to high-risk AI systems
  • Draft enforceable contractual clauses addressing EU AI Act obligations (data quality, bias mitigation, incident reporting, audit rights)
  • Build ongoing supplier monitoring and re-evaluation processes with performance KPIs and drift alerts
  • Integrate supplier controls into the wider QMS, risk management system, and post-market monitoring plan

Course Structure

The workshop covers: Clause 8.4 Deep-Dive & AI-Specific Supply-Chain Risks - Supplier Evaluation Scorecard Workshop - Risk-Based Supplier Classification - Contractual Clauses Masterclass & Monitoring Dashboard Design - Personalised 30-Day Rollout Plan & Evidence Package Review.

Register for Upcoming Training

Training Calendar