Assess an AI Tool
Are you deciding whether to adopt an AI tool?
We review a proposed AI tool using the NIST AI Risk Management Framework. We help your management team decide whether to approve it, approve it with conditions, run a limited pilot, delay adoption or reject it.
You receive:
- A clear description of the tool, its intended use and the assessment scope.
- An initial risk assessment and recommended safeguards.
- A current and target NIST AI RMF profile showing existing risk-management practices and the improvements needed.
- A decision brief for management.
Best for organizations making a decision about a specific AI tool.
Assess AI Risks and Impacts
Do you need a closer look at an AI system's risks or effects on people?
We assess risks, impacts or both for a proposed or existing AI system. We can build on assessments your organization has already completed.
AI Risk Assessment and Treatment
Using the NIST AI RMF and guidance from ISO/IEC 23894, we help you identify and assess AI risks and plan the agreed response.
The work may include:
- Risk criteria, a risk register and priorities.
- A treatment plan and recommended controls.
- Remaining-risk decisions for management.
- Monitoring and follow-up arrangements.
AI Impact Assessment
Using guidance from ISO/IEC 42005, we examine how the AI system and its foreseeable uses could affect individuals, groups and society, alongside relevant organizational impacts.
The work may include:
- The system's intended use, data, model and deployment context.
- The people and groups who may be affected.
- Potential benefits, harms, failures and misuse.
- Fairness, privacy, transparency and human oversight considerations.
- Recommended measures, follow-up actions and decisions for management.
Best for organizations that need a deeper assessment than an initial adoption review.
Build an AI Governance System
Do you need consistent rules for AI use across your organization?
We help you establish an AI management system aligned with ISO/IEC 42001.
An AI management system brings together the people, policies, responsibilities and processes used to manage AI. It helps your organization request, assess, approve, monitor, change and retire AI systems consistently.
Support may include:
- An implementation plan and a defined scope.
- AI policies, objectives and responsibilities.
- An inventory of AI systems and their uses.
- Risk and impact assessment procedures.
- Controls for suppliers, operations and human oversight.
- Monitoring, management review and improvement processes.
Best for organizations with growing AI use that need a consistent process for assessing, approving and overseeing each AI system. Individual tools may still need separate decisions within that consistent process.
Prepare for ISO/IEC 42001 Certification
Is your AI management system in place and an audit approaching?
We help your organization review its AI management system and prepare for an independent certification audit.
Support may include:
- Reviewing your current system, documents and controls.
- Identifying gaps and developing an improvement roadmap.
- Internal audit and management review preparation.
- Corrective action tracking.
- A readiness report identifying remaining actions.
Best for organizations with an operating AI management system that are planning for certification.
