Domain 01 of four

AI Governance, AI Literacy and Intelligent Automation

Helping organisations adopt Artificial Intelligence responsibly, strengthen workforce capability and identify high-value opportunities for controlled automation.

Start with the AI Governance and Automation Preliminary Assessment

Request an assessment All services

Why it matters

The problem this addresses

Adoption of Artificial Intelligence rarely arrives as a project. It arrives as individuals finding tools that make their work easier, which is a good instinct and a difficult thing to govern after the fact.

The exposure is quiet. Confidential information entered into a tool nobody approved. A decision affecting a customer, made with output nobody checked. Neither is visible until somebody asks, and by then the answer has to be reconstructed.

Scope

The assessment may examine

Existing Artificial Intelligence tools and employee usage
Leadership awareness and accountability
Policies and acceptable-use requirements
Data protection, confidentiality and cybersecurity risks
Employee Artificial Intelligence literacy and competency
Procurement and third-party risks
Potential Artificial Intelligence and automation use cases
Governance gaps requiring management attention

Key standards: Framework alignment is a statement of method, not a certification claim.
ISO/IEC 42001: Artificial Intelligence management systems. Our approach to this domain is aligned to it.
NIST AI Risk Management Framework: Govern, Map, Measure and Manage.
ISO/IEC 23894: Guidance on Artificial Intelligence risk management.
COBIT 2019: For the accountability and decision rights around adoption.

Assessment

Included in the Assessment

Current-state readiness summary
Key governance and operational risks
Prioritised Artificial Intelligence and automation opportunities
Recommended immediate controls
Executive findings presentation
Practical 90-day action roadmap

Price: Quoted on request. Each Preliminary Assessment is a paid, fixed-scope advisory engagement, confirmed before commencement based on the agreed scope, the number of stakeholders and the depth of evidence required.
Not an audit: Preliminary Assessments are advisory reviews. They are not certification audits, penetration tests, statutory audits, or formal legal and regulatory compliance opinions.

Implementation

Available as an Implementation Engagement

An assessment that ends at a report has done half the job. Building what it recommends is a separate engagement, scoped and quoted against what you need, and never bundled into the assessment.

Further advisory services

Artificial Intelligence governance frameworks
Policies, standards and acceptable-use requirements
Executive and employee literacy programmes
Risk and impact assessments
Use-case identification and prioritisation
System and use-case registers
Vendor and procurement assessments
Generative Artificial Intelligence and Microsoft Copilot governance
Intelligent automation roadmaps
Responsible implementation support

How it is priced: Quoted on request. Fixed scope and fixed fee, agreed in writing before work begins. We do not work on an open-ended basis.
Independence: Assessment and implementation are separately scoped engagements, quoted and agreed in writing before either begins. Keeping them separate is deliberate. It is what allows the assessment to stay independent, and it means you are never presented with findings that happen to recommend more of our own work. Where we have implemented something, any later re-assessment of that work says so plainly.

Intended outcomes

Clear accountability for decisions involving Artificial Intelligence
Controlled and prioritised adoption
Improved employee competency
Reduced privacy, security, ethical and operational exposure
Better alignment between investment and organisational objectives
Greater confidence in adopting automation responsibly

Where does this sit for you today?

If you are not sure whether this is the right starting point, the Quick Diagnosis takes about two minutes and gives you a position on the page. Nothing is sent anywhere.

Discuss a governance concern Try the Quick Diagnosis