Visibility and control
You know which AI is in use, with what data, and who owns each system—including tools teams adopted on their own.
Service 01
Responsible AI adoption based on ISO/IEC 42001
This service helps an organization use AI with clear rules, named owners, and risks under control—following ISO/IEC 42001, the international standard for AI management systems.
We start by defining how AI is used, who is accountable for each system, and which risks you accept. With those rules in place, we implement the use cases that create value. The framework is ISO/IEC 42001—the international standard for AI management systems.
Want a quick read on where you stand? Take the quick self-assessment: 12 questions, about 5 minutes.
Benefits
What the organization gains
AI governance pays off mainly as control, trust, and faster decisions. Day to day, that looks like:
Lower risk
You catch information leaks, errors, bias, and personal-data issues before they become incidents.
Client and partner trust
Documented evidence for due diligence, RFPs, and parent-company questionnaires.
Faster decisions
Shared criteria to approve or reject a new AI use—without reinventing the debate every time.
Better-aimed investment
You put AI where it creates value, with use cases ranked by expected value, feasibility, and risk.
Obligations in view
You see which rules already apply to AI use; the organization maintains the register and legal counsel validates interpretation.
What about ROI? AI governance is not sold as a savings percentage. Its value is in costs avoided (incidents, leaks, rework, pilots that never scale) and in what it unlocks. What can be measured, we measure: the organization sets AI objectives and indicators, leadership reviews them, and each prioritized use case carries its own business case.
What it includes
How we work
01
Gap assessment—or a clean kickoff
If you already have some practice in place, we review the organization against every requirement of the standard. If you are starting near zero, we run a one-week kickoff (interviews, inventory of AI in use, preliminary scope, and roadmap) and move straight into management-system deliverables.
- Initial compliance checklist, requirement by requirement (when there is already progress).
- Inventory of AI uses: official tools, shadow tools teams adopted, and vendor features.
- Report or prioritized roadmap—credited toward implementation if you contract within the agreed window.
02
Implement the management system
The five phases of AI with Judgment, with concrete deliverables in each. In context and scope, we document obligations that already apply (for example, personal-data protection rules in your jurisdiction) in a legal-requirements register: your organization keeps it current and legal counsel validates interpretation. This is not legal advice from the consultant.
- Register of legal requirements that apply to AI use (owned by the organization; interpretation validated by legal counsel).
- AI policy approved by leadership, plus a responsible-use policy for staff.
- Roles: who decides, who supervises each system, and who can stop it.
- Risk matrix, impact assessments, and statement of applicability for controls.
- Roadmap of use cases and processes ranked by expected value, feasibility, and risk—with a business case.
- Controls over data, vendors, and the lifecycle of each AI system.
- Internal audit, management review, and final compliance checklist.
03
Handover
The engagement ends with the management system running: your internal owner and committee use the flow to approve new AI uses and keep the records.
04
After the project (optional)
If you later want focused support on AI governance, we contract it separately:
- Annual internal audit of the management system (the owner cannot audit their own system).
- A new AI use case: dossier for organizational approval and a usage guide.
- Regulatory update when a law that affects the system changes or is enacted.
Standard-grade discipline, sized to your organization
Quick self-assessment
How does your organization govern AI today?
About five minutes across the phases of the AI with Judgment methodology. You get your level, results by phase, gaps, and a clear next step.
From governance to automation
The roadmap becomes real automations
The risk-and-impact phase ends with a roadmap of use cases ranked by value and risk. Those processes get automated next—inside rules you already defined—and monthly maintenance keeps them running.
Fit
It makes sense if
- AI is already in use, but without shared rules or clear owners.
- Clients, parent companies, or partners ask how you manage AI and data.
- Leadership wants to scale AI without improvising every project.
- You want ordered AI use with documented evidence and applicable obligations in view.
First step
How it starts
- First conversation. Free—to understand context and priorities.
- Gap assessment or kickoff. Sets scope and plan from your starting point.
- Phased implementation. Deliverables along the way; verification at the end.
- Afterward (if needed). Internal audit, new use case, or regulatory update.
Questions
Questions about this service
What is ISO/IEC 42001?
ISO/IEC 42001 is the first international standard that sets requirements for an artificial intelligence management system: the policies, roles, processes, and controls an organization uses to direct and oversee its use of AI. It was published in December 2023 by ISO and IEC and applies to any organization that develops, offers, or simply uses AI.
What is a gap assessment?
It is a review of the organization against all ISO/IEC 42001 requirements that shows where it stands, what is missing, and where to start. It uses a compliance checklist and ends in a report with a roadmap.
What deliverables does the organization receive?
Among others: the initial and final compliance checklist, the inventory of AI uses, the AI policy and responsible-use policy, the roles matrix, the risk matrix, impact assessments, the statement of applicability of controls, the internal audit report, and the improvement plan.
Must the standard be implemented across the whole organization?
No. Scope is defined with the organization: it can start with one area, one process, or a group of AI systems, and expand later. Within that scope, all requirements of the standard are addressed.
What support is there after AI governance is implemented?
Implementation is a closed project: when it ends, the organization operates the system. If support is needed later, it can hire annual internal audit, addition of a new AI use case, or an update when regulation changes.
Other service
Process automation
Start with a portfolio review if priorities are unclear, a fixed-price project for one process, or a program to scale cleanly. Every automation ships documented, with files you can export. After go-live: run it in-house or keep monthly maintenance.
Contact
Let’s talk about your context
Tell me what’s getting in the way—or what you want to achieve. The first call is free and includes a quick AI maturity check.