top of page

AI Governance: ISO 42001, NIST AI RMF and EU AI Act

IDEAL FOR:

Organizations where staff use ChatGPT, Copilot or similar tools with business data.

Firms building AI into their products or services.

Companies selling into the EU that need to understand the EU AI Act.

ON-SITE
REMOTE

DESCRIPTION

You're adopting AI. Who owns the risk? We set up AI governance sized to how your organization actually uses or builds AI: a practical starter programme, or a full ISO/IEC 42001 AI management system ready for certification. It's led by an ISO 42001 Lead Auditor and aligned to the NIST AI Risk Management Framework.

BENEFITS

  • AI acceptable-use policy.

  • Inventory of AI tools and use cases.

  • AI risk and impact assessment.

  • Roles and an approval process for new AI tools.

  • EU AI Act classification check.

  • Full ISO/IEC 42001 management system and internal audit, if you want certification.

  • Mapping to the NIST AI RMF, so US customers see the programme in their terms.

HOW IT RUNS

  • Starter: AI use review and inventory (weeks 1–2).

  • Policy, roles and risk assessment (weeks 2–5).

  • ISO 42001 build, if certifying (months 2–5).

  • Internal audit and certification support (months 5–6).

bottom of page