Procurement Due Diligence

Procurement due diligence refers to the systematic evaluation and risk assessment process organizations conduct before purchasing AI systems, software, or services from external vendors. This involves vetting vendor credentials, reviewing security practices, assessing data handling capabilities, and ensuring compliance with regulatory requirements and internal governance standards. For enterprises, rigorous procurement due diligence is essential to mitigate legal, security, and operational risks while ensuring that acquired AI solutions align with organizational values and compliance obligations.

1 item

ResearchGlobal2026-08-28

Country-of-Origin Labels on AI Models Are Not Reliable, Cisco Research Finds

Cisco and the Vulnerability and Adversarial Intelligence Lab (VAIL) published research showing that fine-tuned AI models can retain detectable behavioral fingerprints from their upstream base models, even when marketed under a different country of origin. The researchers demonstrated this using model fingerprinting tools on Nvidia Nemotron models built on Qwen base weights, finding traceable similarities to Qwen despite Nemotron's US-origin labeling. The paper calls for model bills of materials, routine lineage disclosure by developers, and more rigorous due diligence from enterprises and regulators.

Cisco VAIL Qwen Nemotron model provenance AI supply chain AI SBOM procurement due diligence