Single-Supplier Dependency as a Point of Failure
單一供應商依賴形成單點故障
Operation & Monitoring
Risk Description
When a supplier experiences a regional service outage, and all of the organization's AI-dependent functions stop simultaneously; due to unmitigated control gaps, with no fallback architecture or degraded mode, the interruption persists until the supplier recovers, with only manual processing available in the meantime, triggering compliance exposure and operational reputational costs.
Framework Mappings
OWASP Top 10 for LLMLLM10
MITRE ATLASAML.T0029
ISO/IEC 5338運作與監控
MIT AI Risk RepositoryDomain 6
Risk Treatment & Implementation Guidance
Adopt multi-supplier redundancy so critical functions can switch to alternatives; Design degraded modes sustaining operations with simplified functionality during outages; Drill switchover and degradation regularly so they activate promptly in real outages