ISO42001-A.10.4-03
Requirement
A.10.4 — Provision of AI System to Third Parties
Establish responsibility-defining agreements with third parties
Description
The organization must establish formal agreements that clearly define the respective responsibilities of both the organization and the third party for risk management, monitoring, incident reporting,...
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
ISO42001-A.10.4-01
Requirement
Establish processes for responsible AI system provision to third parties
ISO42001-A.10.4-02
Transparency
Provide comprehensive AI system information to third parties
ISO42001-A.10.4-04
Risk Management
Consider potential for third-party misuse
ISO42001-A.10.4-05
Risk Management
Implement controls to mitigate third-party misuse risks
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started