AI Governance & Assurance
Govern the decisions you delegate to AI, and be ready for regulators and independent assurance.
For Boards, risk and compliance leaders, and regulated organisations.
Regulators increasingly expect an inventory of AI, named owners, human oversight and evidence that controls work. Most organisations cannot say how many AI systems they run, let alone what each may do.
Our method borrows from financial audit, so evidence is organised around the assertions an assurer will test.
How we help
AI inventory and agent register
Every AI system and agent in use, including those inside vendor software, with a named owner and a risk rating.
Delegation maps and controls
What each material agent may do alone, may only recommend, and must leave to people.
Gap assessment
Governance compared with relevant guidance and standards, such as Singapore's model frameworks, MAS guidelines for financial institutions and ISO/IEC 42001.
Assurance readiness
An evidence file, a readiness rating for each control area and a remediation plan.
We help organisations prepare for assurance. We do not provide independent assurance to organisations we advise or invest in, and we do not offer certification.
- AI inventory and agent register
- Delegation maps for material agents
- Gap assessment against chosen guidance
- Evidence file and remediation plan
- 01Inventory and risk classification
- 02Controls and evidence review
- 03Gap assessment
- 04Remediation plan and board report
Discuss this service
Tell us what you are working on, and a partner will be in touch.