Episode ResourceSecurityFor practitioners
The Unsigned Inventory
From the episode: Nobody approved the AI model you depend on
“Send the AI model through procurement.”
Every third-party thing in your building was signed for except the ones that arrived as a download. This page lists them and answers the four questions procurement would have asked if anyone had shown it the door.
- What it is: one row per model or hosted model service your product depends on.
- Who fills it in: whoever ships the thing. You will not need security for the first pass, and that is the point.
- When: once now, and again whenever a model is added or swapped.
- Time: about half an hour for the first product. Ten minutes after that.