AI Risk & Governance Readiness
EU AI Act, NIST AI RMF and ISO 42001 readiness — from inventory to roadmap.
Organizational readiness assessment for EU AI Act, NIST AI RMF and ISO 42001 requirements. AI system inventory, gap analysis, and prioritized implementation roadmap for AI security controls.
The EU AI Act is not a distant prospect — obligations for high-risk systems are taking effect in stages from 2025. Organizations using AI in decision-making, credit scoring, KYC, recruitment, or critical infrastructure must demonstrate compliance.
We conduct a 4-6 week assessment covering: full inventory of AI systems (own and third-party), control mapping vs EU AI Act / NIST AI RMF / ISO 42001 requirements, gap identification, and a prioritized implementation roadmap.
We combine GRC experience (ISO 27001 Lead Auditor, CISSP) with practical AI/ML security knowledge — from MLOps pipelines to LLM integrations.
Benefits
- Complete AI inventory — mapping all AI systems including shadow AI
- Gap analysis vs 3 frameworks — EU AI Act, NIST AI RMF, ISO/IEC 42001 in one project
- Prioritized roadmap — concrete steps with cost estimates and timeline
- Compliance documentation — ready for audit and regulator
- Combined expertise — GRC + AI security in one team
For Whom
- Banks and insurers — AI in credit scoring, fraud detection, KYC
- Large enterprises — internal ML platforms, copilots, decision systems
- Critical infrastructure operators — AI in OT, energy, transport
What We Deliver
- AI system inventory with risk classification
- Gap analysis vs EU AI Act / NIST AI RMF / ISO 42001
- Report with prioritized implementation roadmap
- Documentation templates (AI ROPA, AI DPIA, AI policy)
- Results presentation for management
Pricing: from €25,000 per engagement | Contact us — we’ll assess scope for free.