Inventory & classification
Identify AI uses, owners and suppliers, then assess the risks in context.
Establish policies, risk classification, approval routes and human oversight across the AI lifecycle, including third-party and generative AI use.
AI governance needs decision rights and operating controls that teams can use. We help turn principles into accountability, oversight and evidence.
Identify AI uses, owners and suppliers, then assess the risks in context.
Define acceptable use, approval requirements and human oversight.
Set escalation, incident handling, ongoing review and executive reporting.
Scope, evidence requirements and deliverables are agreed before work begins. Each engagement is shaped around your systems, risk exposure and current maturity.
Create a baseline of systems, uses, owners and risk exposure.
Establish policy ownership, decision rights and oversight forums.
Specify requirements for approvals, monitoring and human intervention.
Map gaps to actions and an evidence-based programme of work.
Yes. The engagement can review your existing governance arrangements, identify gaps and focus on the controls and operating processes that need improvement.
The assessment can be mapped to agreed frameworks such as NIST AI RMF or ISO/IEC 42001, and to applicable regulatory requirements. Readiness work does not constitute certification or a guarantee of compliance.
Discuss your data governance, AI assurance or agentic AI control requirements with Data Angles.