AI governance assessment
How your organization uses AI: the tools staff already use, the data going into them, and the policy and controls to close the gap. Measured against NIST AI RMF, ISO/IEC 42001 or the EU AI Act.
What’s included
- Shadow AI discovery. What AI tools your people are genuinely using, including the ones procurement never saw and the browser extensions nobody logged
- Data exposure review. What company information is being pasted into third-party models, and which of those vendors retain it for training
- Your AI acceptable use policy reviewed, or written from scratch if there is not one, in language your staff will actually follow
- Approval workflow for new AI tools, so the next request has a route that is not simply “no”
- Accountability mapping: who signs off on AI decisions, who is answerable when one goes wrong, and who reviews them afterward
- Third-party and vendor AI risk, including the AI your suppliers have quietly added to products you already use
- Measured against NIST AI RMF, ISO/IEC 42001, or the EU AI Act, whichever your customers and regulators will ask about
- You finish with a governance maturity rating, a prioritized gap analysis, and the policy documents themselves.
