Getting AI Right from the Start: Leading Practices in Planning and Due Diligence Briefing Paper

As AI becomes more deeply embedded in third-party products and services, Planning and Due Diligence have become critical stages for identifying risks before they are locked into contracts or operations. This paper highlights leading practices for organizations seeking to strengthen early-stage oversight of AI-enabled suppliers. It emphasizes the need for cross-functional collaboration, clear alignment with business objectives, and a structured governance and resource planning approach. 

Key areas of focus include: 

– Differentiating AI as a core offering versus a behind-the-scenes enabler
– Understanding when use cases, not just technologies, create unacceptable risk
– Pinpointing governance, expertise, and oversight requirements unique to AI adoption
– Strengthening due diligence with targeted reviews of transparency, data practices, and model performance
– Anticipating compliance obligations under global frameworks such as the EU AI Act, NIST AI RMF, and ISO/IEC 42001