While 84% of ethics and compliance (E&C) teams claim ownership of third-party risk management for artificial intelligence (AI), a mere 14% have actually audited even half of their vendors, according to Ethisphere. This disparity leaves organizations exposed to significant unmanaged liabilities, impacting data privacy and operational integrity. The gap between declared responsibility and practical action creates a critical vulnerability in the AI supply chain.

Organizations are establishing ethical AI frameworks and assigning oversight, but the practical implementation and auditing, especially for third-party risks, remains critically underdeveloped. This tension between policy and execution undermines efforts to build trust in AI systems. The lack of rigorous external validation negates internal ethical commitments.

Companies are creating a false sense of security around AI ethics, leaving themselves exposed to significant unmanaged risks from external partners. This approach prioritizes internal policy over genuine mitigation, accumulating potential ethical breaches and reputational damage from their AI supply chain.

Establishing Global Ethical AI Benchmarks

The global community has moved to establish foundational ethical AI frameworks. UNESCO produced the first-ever global standard on AI ethics, the ‘Recommendation on the Ethics of Artificial Intelligence,’ in November 2021. This benchmark applies to all 194 member states, establishing a broad consensus on ethical principles for AI development and deployment. The European Union’s Ethics Guidelines for Trustworthy Artificial Intelligence, presented in April 2019, put forward a set of 7 key requirements for AI systems to be deemed trustworthy: lawful, ethical, and robust, according to Digital Strategy. These guidelines cover how to procure, design, build, use, protect, consume, and manage AI and related technologies, according to TechTarget. Such foundational efforts demonstrate a global consensus on the necessity of ethical AI, establishing a baseline for trustworthy systems and outlining a broad scope for its application across diverse sectors.