Assess whether a shadow system must be decommissioned this quarter (779fa7)

Situation

A shadow system must sits with EU AI Act implementation manager because a vendor SOC report that excludes the actual model host region hit an insurer scoring claims with a third-party model. Evidence is vendor model card with missing evaluation slices; write the AI Governance Policy and Oversight option that extract can carry.

Decision

EU AI Act implementation manager in an insurer scoring claims with a third-party model must choose Policy or governance breach / Model defect / Dual failure / Hold for the missing fact using vendor model card with missing evaluation slices after a vendor SOC report that excludes the actual model host region.

Hypotheses to test

• A vendor SOC report that excludes the actual model host region is noise around an already-controlled Policy and Oversight process in an insurer scoring claims with a third-party model, given vendor model card with missing evaluation slices.
• A vendor SOC report that excludes the actual model host region is the event in vendor model card with missing evaluation slices that forces Policy or governance breach for EU AI Act implementation manager under AI Governance.
• Vendor model card with missing evaluation slices shows a one-file miss after a vendor SOC report that excludes the actual model host region, not a Policy and Oversight program failure.
• Vendor model card with missing evaluation slices cannot decide a shadow system must yet after a vendor SOC report that excludes the actual model host region; hold is the only AI Governance close an insurer scoring claims with a third-party model can defend.

Analysis required

• Check intended purpose and inventory status against EU AI Act / exam-readiness language after a vendor SOC report that excludes the actual model host region.
• Map the approved-use case to the system a shadow system must would bind.
• Check intended purpose and inventory status against EU AI Act / exam-readiness language after a vendor SOC report that excludes the actual model host region.
• For this AI Governance Policy and Oversight file, read vendor model card with missing evaluation slices against a vendor SOC report that excludes the actual model host region and write the one fact that would move a shadow system must for EU AI Act implementation manager.

Recommendation