Skip to content
AI Journey Advisory

Govern

AI Governance Starter

Make AI approval and accountability clearer, with evidence available for internal review.

Fixed fee
$6,500
Duration
3 weeks
Typically bought by
CISO, risk leader, COO, legal or compliance sponsor
Discuss this service

Overview

AI use lacks clear rules, owners or approvals. Put policies and risk workflows in place.

Decision it enables
Operate an initial approval process with owners and evidence.
Included scope
Up to 10 declared AI uses; 3 detailed risk reviews; 4 policy/process documents; 2 case walkthroughs.
Exhibit 1What you receive: 5 deliverables
DeliverableFormatContents
AI inventory and risk triageWorkbookDeclared uses, owners, purposes, initial risk categories and review status.
Three detailed risk reviewsEditable documentsRisk, impact, control expectations, residual issues and decisions for priority uses.
Four policy and process documentsEditable documentsAcceptable use; intake and vendor review; approval and oversight; incident escalation.
RACI and evidence registerWorkbookAccountability, required records, review dates and remediation owners.
Two governance walkthroughsWorkshop recordsApply the proposed process to two sample cases and record improvements.

Source: Written scope for this service. Materials are handed over in the formats shown.

How we deliver it

  1. Inventory up to ten declared AI uses and confirm owners and review status.

  2. Complete three detailed risk reviews and record control expectations and unresolved issues.

  3. Tailor the four documents: acceptable use, intake/vendor review, approval/oversight and incident escalation.

  4. Prepare the responsibility matrix and evidence register.

  5. Walk two cases through the proposed process; record decisions and improvements.

  6. Hand over the pack and record client approval decisions and remediation owners.

How you will know it is complete

  • The inventory identifies the owner and review status of each declared use.
  • All four documents are tailored to the agreed scope and consolidated feedback.
  • Two cases can be processed through the proposed workflow with decisions and evidence captured.

Why it is worth the fee

Decision it enables
Operate an initial approval process with owners and evidence.
How to measure value
Track the share of inventoried AI uses that have a named owner and a current review status.
Starting evidence
Current AI usage (declared and shadow IT), existing policies, and risk appetite.
Who tracks it, and when
Risk/Compliance owner; quarterly review of the evidence register.

These are proposed follow-up measures. The fee covers the listed advisory outputs; realised benefits depend on implementation.

Requirements and boundaries

What we need from you

Declared use inventory; existing policies; risk and legal contacts; client review of applicability and acceptable risk.

Scope boundary

NIST-aligned process design. No legal opinion, compliance certification, security certification, penetration test or full ISO management-system implementation.

Next step

Scope AI Governance Starter for your organisation.

Share the decision and your deadline. We confirm fit, the written scope and the fixed fee before any work starts.