Cybersecurity governance and leadership
AI governance (ISO/IEC 42001 and AI Act)
Inventory, risks, evidence and maturity to use artificial intelligence with control and compliance.
What it involves
What we do
Adopting AI demands governance: which systems are in use, with what data, what risks they create and how compliance with the European AI Regulation is demonstrated. We build your AI management system aligned with ISO/IEC 42001.
What's included
- Inventory of AI systems and use cases
- Risk classification under the AI Act
- AI and generative AI usage policies
- Risk and impact assessment of AI systems
- AI governance register and ISO/IEC 42001 evidence
- Maturity assessment and adaptation plan
Who it's for
- Organisations deploying AI in business processes
- Providers and developers of AI systems
- Regulated entities that must demonstrate control over AI
Deliverables
- AI inventory and register
- AI usage policy
- AI risk assessment
- ISO/IEC 42001 maturity report
Reference frameworks and standards
Reference frameworks used to design, implement, review and evidence. They are not presented as our own certifications unless contractually applicable.
How we approach it
- DiscoverWe get to know your business, environment, risks and priorities.
- AnalyseWe assess maturity, exposure, compliance and real capabilities.
- DesignWe define strategy, roadmap, architecture and action plan.
- ImplementWe deliver controls, processes, technology and evidence.
- OperateWe monitor, respond and support continuous improvement.
- OptimiseWe measure results, reduce risk and evolve capabilities.
Related services
More in Cybersecurity governance and leadership
vCISO
External, part-time cybersecurity leadership with executive accountability.
Govern- Security master plan
- Executive dashboard
- Quarterly report to management
CISO Office
A security office that gives the in-house CISO structure, method and delivery capacity.
Govern- Project plan and tracking
- Evidence repository
- Status reports for committees
Security Committee
Design, set-up and facilitation of the cybersecurity governance body.
Govern- Committee charter
- Executive dashboard
- Minutes and resolution tracking
Risk governance
Methodology, analysis and treatment of technology risks aligned with the business.
Govern- Risk analysis report
- Risk map and risk appetite
- Prioritised treatment plan
Roadmap and executive reporting
Multi-year roadmap and executive reporting that translate security into decisions.
Govern- Cybersecurity roadmap
- Executive dashboard
- Periodic report to management
Third-party risk (TPRM)
Management of supplier and third-party risk across the entire lifecycle.
Govern- TPRM programme
- Supplier and risk register
- Assessment reports per supplier
Let's talk
Does AI governance (ISO/IEC 42001 and AI Act) fit your situation?
Tell us about your challenges and let's design together the best strategy to protect and strengthen your business.