Third-Party Service Provider Risk
第三方服務供應商風險
When the supplier updates the underlying model without prior notice; due to unmitigated control gaps, the organization's downstream application behaves differently, existing prompts and parameters stop working, and output quality visibly degrades, triggering external stakeholder impacts and causing the organization must urgently divert staff to recalibrate, during which service quality remains unstable and customer complaints rise sharply.
Framework Mappings
Risk Treatment & Implementation Guidance
Contractually require advance notice and transition periods for underlying model changes; Adopt a multi-supplier strategy or maintain switchable alternatives to reduce single-supplier change impact; Prepare degradation modes and a regression test set to validate quickly upon upstream changes and pin a stable version temporarily