AI models are becoming managed-platform dependencies with retirement dates, behavioral drift, and vendor-controlled lifecycles. CIOs should treat model replaceability as an operational resilience control before production AI becomes tomorrow’s fragile legacy.
Third-party cyber risk is no longer a supplier-review problem. It is a service-survivability problem, and the dangerous vendor is often the one you cannot replace, work around, or operate without under pressure.