Skip to content
Skip to content
IIAIT

L3-M4 / Governance & compliance

General-purpose AI in the supply chain

One model vendor signs a code, another releases weights and a third offers impressive scores. Compare the evidence your finished system will actually need.

Start the first lessonCompliance, legal and procurement specialists

Your fictional workplace case

The best benchmark. The right supplier?

01 / case evidenceModel claims

Benchmarks, code commitments and open weights differ.

02 / the decision at stakeSystem evidence

Your intended use determines the questions to resolve.

TRACE THE SUPPLY CHAIN
Around 35–50 min, at your pace One decision record to take away0/4 parts complete

What you will create

A draft: GPAI supplier due-diligence questionnaire

Use the fictional case to record evidence, explain a provisional decision and identify the next owner or action. This is a learning draft for self-review, not approved documentation for a real organisation.

See what goes into your worksheet
  • Model identity, version, release and provider
  • Capabilities, limitations and intended integrations
  • Article 53 documentation and downstream information
  • Copyright policy, training summary and open-source basis
  • Systemic-risk status, security and incident cooperation
  • Change notice, evidence gaps and integration decision
Preview the workplace task →

From understanding
to better judgement.

Two lessons, a workplace decision and a final check.

01 / YOUR NEXT STEP

Separate model duties from system duties

A team chooses a model for a branded customer-service assistant.

Lesson 1 · 10–15 min02 / LEARN

Evaluate systemic risk and supplier change

The assistant may later be adapted for insurance pricing.

Lesson 2 · 10–15 min03 / APPLY

Apply what you learned

GPAI supplier due-diligence questionnaire

Workplace task · 8–12 min04 / CHECK

Check your understanding

Apply the ideas to 15 workplace questions.

Final check · 5–10 min

Skills you will practise on the case

A method for your
next work decision.

  • Distinguish model-provider duties from system-provider and deployer duties.
  • Assess documentation, copyright and systemic-risk requirements.
  • Evaluate supplier claims and open-source exceptions.
  • Build a traceable downstream information and change process.
LayersModel provider and system builder
EvidenceDocumentation, rights and risk
IntegrationIntegrate, monitor and plan exit

The case is fictional. Timing is a planning estimate; pause whenever you need. This module is a learning activity, not a verified professional certification.