Compliance / AI governance
AI governanceWe help organizations set AI policies, assess AI risk and control what data goes into AI tools, built on the NIST AI Risk Management Framework and ISO/IEC 42001.
Your team is probably already using AI. The question is whether anyone has decided how.
Our AI governance self-assessment checks your policies, tools and data handling.
Policies, roles and accountability for AI use.
Know where AI is used and what it touches.
Assess and track AI risks.
Prioritize and act on those risks.
For organizations that want certification, ISO/IEC 42001 defines an auditable AI management system.
Find the AI tools in use and the data flowing into them.
An AI use policy people can follow, including what data is off limits.
Assess AI risks to your data, contracts and customers.
Approved tools, vendor review and technical guardrails.
Staff training and a review cycle as tools change.
A practical first 90 days, mapped to NIST AI RMF and ISO/IEC 42001.
Download →Only into tools approved for CUI, which generally means environments meeting FedRAMP Moderate or equivalent. Most consumer AI tools are not.
It isn’t required. It is most useful for companies that build AI into products and want an auditable certification.
Yes. Data entered into AI tools falls under the same handling, access and vendor controls as the rest of your environment.
With an inventory and a short, clear AI use policy. Most organizations can have both in place quickly.
Book a 30-minute call. We’ll look at how your team uses AI today and what policy you need first.