Topic

AI Procurement

AI procurement refers to the acquisition processes and policies organizations use to select, purchase, and deploy AI technologies, tools, and services from external vendors. This function is critical for governance because procurement decisions directly impact an organization's exposure to technical debt, vendor lock-in, security vulnerabilities, and compliance risks. Effective AI procurement policies establish clear evaluation criteria around model transparency, data handling practices, liability frameworks, and regulatory alignment to ensure purchased AI solutions meet enterprise standards before integration.

1 item

Corporate PolicyGlobal2026-07-07

OneTrust's AI Governance Committee Framework Sets a Practical Bar for Agentic AI Controls, Including Traceability and Least-Privilege Requirements

OneTrust has published a detailed account of how it built its own AI Governance Committee, including a structured 'buy versus build' decision framework for third-party AI tools and specific controls for agentic AI systems. The guidance requires decision control restrictions, full traceability of autonomous actions, and least-privilege data governance for any AI that operates with meaningful autonomy. The publication functions as a practitioner implementation guide that compliance teams at other enterprises can benchmark against their own programs.

agentic AI governance committee traceability tool-use risk least privilege OneTrust third-party AI risk AI procurement