Prove your AI is under control
A structured, evidence-based assessment of how well you govern AI — 8 dimensions, 40 scored questions, measured on a 5-level maturity scale and mapped to ISO/IEC 42001 and 27001.
AI arrived faster than the rules around it – tools bought by departments, agents switched on inside platforms you already own, staff using whatever worked.
The hard questions are now arriving from the board, customers’ procurement teams, auditors and regulators: Who approved this? What data does it touch? What happens when it gets something wrong?
Most organisations can’t answer any of those with evidence.
Trigger signals: the board has asked whether AI use is safe; ISO/IEC 42001 ambition or EU AI Act exposure; a supplier questionnaire you couldn’t complete; shadow AI discovered, or an AI near-miss.
A maturity score across all eight dimensions, plus a single headline position.
Evidence-backed findings – what’s strong, what’s weak, what’s exposed.
A gap analysis against ISO/IEC 42001, mapped to controls you already hold.
A prioritised remediation roadmap, sequenced by risk and effort, each action owned.
A board-ready summary you can put in front of a risk or audit committee.
We would achieve this through a structured set of interviews (IT, security, data, legal, procurement, business), This includes an evidence review mapped to independent scoring against published criteria, and in a summarised findings workshop before the report.
CIO · CISO · Head of Risk & Compliance · Data Protection Officer · IT Director.
2–3 weeks
Interview-led
Remote or on site, no tooling required
