What's included
- ISO/IEC 42001 readiness: gap assessment and a plan towards an AI management system
- AI risk assessment and threat modelling: data leakage, prompt injection, model misuse and supplier risk
- Secure AI platform design: retrieval-augmented generation (RAG) on Azure AI Foundry and Azure AI Search, with clear data boundaries
- Policy and acceptable use: guidance staff can follow, aligned to your existing security and data protection policies
How an engagement runs
- Inventory. Understand where AI is used or planned across the business.
- Assess. Identify the risks and the controls that address them.
- Design. Build governance and, where needed, a secure platform pattern.
- Embed. Hand over policies, processes and patterns your teams can run.
Relevant experience
Development finance
Designed a governed retrieval framework on Azure AI Foundry and Azure AI Search, giving staff useful AI tools inside clear security and data boundaries.
Frequently asked questions
What is ISO/IEC 42001?
ISO/IEC 42001 is the international standard for an AI management system. It sets out how an organisation governs the responsible development and use of AI.
Can you help us use AI securely?
Yes. We design governance and platform patterns that let staff use AI productively while keeping sensitive data inside defined boundaries.
What background do you bring to AI governance?
Practical delivery of secure AI on Azure, long experience in regulated security, and the AI in FinTech programme at Saïd Business School, Oxford.