AI Governance Advisory Services

Adopt AI With Clear Decisions, Clear Owners, and the Evidence to Back Them

We help organizations decide which AI tools to use, understand the risks and the effects on people, and build a system for managing every AI use over time.

Book a Free 20-Minute Readiness Call

Practical advisory support · Clear scope and deliverables · Built around your organization

Why Organizations Call Us

AI Arrives Faster Than the Rules for Using It

Staff may already be using AI tools at work. A supplier may add an AI feature to software you already pay for. A customer may ask how you govern AI, or whether you plan to pursue ISO/IEC 42001 certification.

Leaders want to use AI well. They also need to know who approved each tool, what could go wrong, who could be affected, and what safeguards are in place. We help turn these questions into clear decisions, named owners, and records your organization can stand behind.

Services

Four Ways We Help

Start with one AI tool, look more closely at its risks and effects on people, build the system that governs every AI use, or prepare that system for certification. Scope and timeline are agreed in your proposal.

Service 01: Assess an AI Tool

Decide Whether a Proposed AI Tool Should Be Adopted

Scope and timeline agreed in your proposal

We assess one proposed AI tool using the NIST AI Risk Management Framework and give management a clear recommendation: approve, approve with conditions, run a limited pilot, delay, or reject. The assessment includes an initial review of risk to support the adoption decision.

  • Assessment scope and AI use-case profile
  • Preliminary risk assessment
  • Control recommendations
  • Current and target NIST profile
  • Management Decision Brief

Best when a team wants to adopt a specific AI tool and leaders need a sound basis for the decision.

Service 02: Assess AI Risks and Impacts

Understand What Could Go Wrong and Who Could Be Affected

Scope and timeline agreed in your proposal

The AI Tool Adoption Assessment includes an initial review of risk to support an adoption decision. This service provides a deeper risk assessment, an impact assessment, or both, for a proposed or existing AI system. We agree on the scope so you can build on work already completed.

AI risk assessment and treatment. We assess AI risks and help your team plan and carry out agreed treatment actions, using the NIST AI Risk Management Framework with guidance from ISO/IEC 23894.

  • AI risk criteria, risk register, and priority risk summary
  • Risk treatment plan and control design
  • Remaining-risk decisions for management
  • Monitoring requirements

AI system impact assessment. We assess how an AI system could affect individuals, groups, and society, informed by ISO/IEC 42005. You receive an AI System Impact Assessment Report.

  • The system, its intended use, data, model, and deployment environment
  • Interested and affected parties
  • Benefits, harms, failures, and foreseeable misuse, including fairness, privacy, transparency, and human oversight
  • Required measures, follow-up, and the management decision

Best when you need a closer review of an AI system's risks, safeguards, or effects on people, whether it is proposed or already in use.

Service 03: Build an AI Governance System

Manage Every AI Use, From Request to Retirement

Scope and timeline agreed in your proposal

We help you build an AI management system (AIMS): the people, policies, responsibilities, and processes your organization uses to govern AI. It covers how AI uses are requested, assessed, approved, monitored, changed, and stopped. The work is aligned with ISO/IEC 42001.

  • Implementation plan, organizational context, and scope
  • AI policy, objectives, roles, and AI system inventory
  • Risk assessment and impact assessment procedures
  • Control implementation, supplier governance, and human oversight
  • Operating procedures, monitoring, management review, and improvement

Best when AI use is growing across your organization and each tool is being decided separately.

Service 04: Prepare for ISO/IEC 42001 Certification

Get Ready for Your Certification Audit

Scope and timeline agreed in your proposal

For organizations with an AIMS in place, we review it against ISO/IEC 42001 and prepare your team for the certification audit.

  • Current-state, documentation, and control gap review
  • Implementation roadmap
  • Internal audit and management review preparation
  • Corrective action tracking
  • Certification readiness report

Best when your AIMS is running and you are planning a certification audit.

Why Work With Us

Practical Support Built Around Real Decisions

Standards-aligned

The work draws on the NIST AI Risk Management Framework and the ISO/IEC standards for AI risk, impact assessment, and AI management systems.

Built with your team

The people who own each AI use take part, so they understand the decisions, safeguards, and records.

Clear before work begins

You receive a written proposal explaining the scope, deliverables, schedule, price, and client responsibilities.

Who Leads the Work

Who Leads the Work

Dr. Rose Shumba is a PECB Certified ISO/IEC 42001 Lead Implementer and ISO/IEC 27001 Senior Lead Implementer, with more than 20 years in cybersecurity education. She holds a PhD in Computer Science and is a former director of a Center of Academic Excellence in Cyber Defense designated by the National Security Agency and the Department of Homeland Security.

About Dr. Rose

Who We Serve

Built for Organizations Putting AI to Work

Organizations adopting AI tools For teams bringing AI into customer service, hiring, finance, operations, and other daily work.

Technology companies For companies whose customers ask how they govern the AI in their products.

Regulated and sensitive-data organizations For healthcare, financial services, and other organizations handling sensitive information.

Small and mid-sized organizations For growing organizations that need clear AI rules and owners with a small compliance team.

How We Work

A Clear Process From the First Call to the Final Deliverables

Step 01: Readiness call You explain what your organization is facing with AI, and we discuss whether our services fit your needs.

Step 02: Proposal You receive a written scope with deliverables, schedule, price, and client responsibilities.

Step 03: Deliver the agreed work We carry out the assessment, governance build, or certification preparation defined in your proposal.

Step 04: Review results and next steps We walk your team through the findings, completed work, remaining actions, and responsibilities.

An Important Distinction

An Important Distinction

We assess and recommend. Your management makes the decisions and accepts any remaining risk. Legal questions go to your legal counsel, and detailed technical testing goes to qualified specialists.

Frequently Asked Questions

Who issues the ISO/IEC 42001 certificate?

An accredited certification body conducts the audit and issues the certificate. We prepare your organization for that audit.

Which service should we start with?

Start with Assess an AI Tool when a specific tool is on the table. Choose Assess AI Risks and Impacts when you need a closer look at a proposed or existing system. Choose Build an AI Governance System when AI use is growing across the organization. Choose Prepare for ISO/IEC 42001 Certification when your AIMS is running and an audit is planned.

How is pricing determined?

Pricing depends on the selected service, the number of AI uses in scope, your current state, and the agreed deliverables. The proposal states the price before work begins.

What will our team need to provide?

Your team may need to provide information about the AI tools in use or proposed, supplier documents, existing policies, and access to the people who own and use each tool.

Do you also help with information security?

Yes. Our GRC services help you review, build, and prepare an ISO/IEC 27001 information security management system.

See GRC Services

Start With a Conversation

Put Clear Decisions Behind Every AI Tool You Use

Tell us which AI tool, request, or requirement you are facing. We will discuss your current situation and the next practical step.

Book a Free 20-Minute Readiness Call