RSK-4344 · Third-party risk
Vendor model version changed without notification
Provider silently promoted a minor model revision, shifting answer style and citation formatting mid-quarter.
medium
Exposure score
12/25
likelihood 4 × impact 3
Remediation SLA
14 days
detected 2026-07-15 16:48
Accountable owner
TPRM
named under the AI risk charter
Affected agent
Customer Support Copilot
AGT-1014 · Contact Centre
Investigation
What the sweep found and how it was corroborated
Provider silently promoted a minor model revision, shifting answer style and citation formatting mid-quarter.
Version delta
2026-06 → 2026-07
Eval delta
-2.4 pts
Notice received
none
Exposure position
Placed at likelihood 4, impact 3 on the enterprise 5×5 matrix.
Remediation plan
Tracked to closure
- Pin model version
- Add contractual change-notice clause
- Re-baseline evaluations
Case metadata
- Risk ID
- RSK-4344
- Category
- Third-party risk
- Detected
- 2026-07-15 16:48
- Owner
- TPRM
- SLA
- 14 days
- Agent record
- AGT-1014