Using artificial intelligence to manage supplier risk in complex supply chains

Organizations are turning to generative artificial intelligence and large language models to manage increasingly complex, multi-layered supply chain risks by extrapolating inherent and residual risk from existing program assessment data.

Organizational supply chains have evolved from linear chains into complex, multi-layered supply webs, which has significantly increased the difficulty of conducting effective supply chain due diligence. As these networks grow more intricate and global, companies face mounting pressure to identify, monitor, and mitigate a wider range of risks originating from their suppliers and other third parties. The stakes for ethical conduct, regulatory compliance, and operational resilience continue to rise as dependencies between suppliers deepen and become less transparent.

To address this challenge, some organizations are exploring the use of generative artificial intelligence and large language models to help make sense of vast and fragmented data across their supply webs. The core idea is to use these tools to analyze program assessment data and similar inputs to generate a clearer picture of the overall risk landscape. By processing and interpreting information at scale, generative artificial intelligence and large language models can help organizations more accurately extrapolate their total universe of inherent and residual risk, turning raw assessment data into actionable insight for risk management and due diligence.

The conversation is framed around how ethics and compliance leaders can integrate these emerging technologies into established risk management frameworks without losing sight of core ethical standards. Craig Moss, executive vice president of measurement at Ethisphere, brings additional perspective from his roles at the Digital Supply Chain Institute, the Cyber Readiness Institute, and the Association of Professional Social Compliance Auditors. His background highlights the growing convergence of digital transformation, cybersecurity readiness, and social compliance in managing supplier risk across complex supply webs, and underscores the importance of aligning artificial intelligence enabled analysis with responsible business practices.

50

Impact Score

What businesses need to know about the EU cyber resilience act

The EU cyber resilience act is turning product cybersecurity into a legal requirement for companies that sell digital products into the European Union. A key compliance milestone arrives in September 2026, well before the full regulation takes effect in 2027.

Claude Mythos and cyber insurance’s next inflection point

Claude Mythos is being treated by governments and regulators as a potential systemic cyber risk with implications for financial stability and insurance markets. Its emergence is intensifying pressure on insurers to clarify whether Artificial Intelligence-enabled cyber losses are covered, excluded, or require new stand-alone products.

OpenAI expands ChatGPT ads with self-serve manager

OpenAI is widening its ChatGPT ads pilot with a beta self-serve Ads Manager, new bidding options and broader measurement tools. The push signals a deeper move into advertising as the company expands the program into several international markets.

OpenAI launches Artificial Intelligence deployment consulting unit

OpenAI has created a new consulting and deployment business aimed at helping enterprises build and roll out Artificial Intelligence systems. The move mirrors a similar push by Anthropic and signals a broader effort by model providers to capture more of the enterprise services market.

Contact Us

Got questions? Use the form to contact us.

Contact Form

Clicking next sends a verification code to your email. After verifying, you can enter your message.