Exiger Supply Chain Risk Management - DDIQ Due Diligence Analytics

Overview

Development stage

DeployedSource: c) Deployed – The use case is being actively authorized or utilized to support the functions or mission of an agency.

High-impact designation

Not high-impactSource: c) Not high-impact

Impact justification

Does not produce an output that serves as a principal basis for decisions or actions with legal, material, binding, or significant effect on any of the individuals or entities identified in OMB-25-21.

Start date

2023-09 (month precision)Source: 09/2023

Withheld from public reporting

NoSource: a) No

Mission

Topic area

Cybersecurity

Operational functions

Cyber threat detection, Risk scoring and triage Derived by keyword rules; see methodology

Problem the AI is intended to solve

Provides DOJ with capabilities to perform Supply Chain Risk Management assessments to support agency cybersecurity posture.

Expected benefits

Provides DOJ with analytical risk dashboards and company cybersecurity scorecards which provides DOJ with capabilities to make an informed decisions on whether or not to move forward with the acquisition of a goods/services based on the risks identified during research.

System outputs

List of outputs include additional data and risk scores such as Foreign Ownership Control or Influence (FOCI), Reputational Criminal Regulatory (RCR), Financial Health Risk

Technology

AI classification

Generative AISource: Generative AI: AI that generates new or synthetic content (e.g., images, videos, audio, text, code).

System name(s)

Redacted for cybersecurity purposes.

Custom-developed code

No

Public source code

Not reported

Sourcing

How it was built

Purchased from vendorSource: a) Purchased from a vendor

Vendor (as reported)

Exiger

Vendors (standardized)

EExiger

A vendor is the supplier named by the agency. It does not identify the underlying model or AI technology.

Data and privacy

Involves PII

Yes

Privacy Impact Assessment

Not reported

Authorization to Operate

Yes

Demographic features

This AI use case utilizes one or more of the demographic variables listed in compliance with all federal laws and agency regulations.

Training and evaluation data

The case owner relied on DOJ AI governance practices to select and prepare data, as well as evaluate performance.

Federal Data Catalog

Not reported

Governance

0 of 8 minimum-practice questions answered. A blank answer means the agency reported nothing; it does not mean the practice is absent.

Potential impacts and how they were identified

Not reported