Your register, your taxonomy
Written into the register you already keep, not a parallel one.
The service
From a list of risks to a plan with owners, costs and dates, in your own register and taxonomy. Controls tested, not collected, and mapped to frameworks you already answer to: NIST AI RMF, ISO/IEC 42001, the OECD AI Principles, OWASP’s AI Security and Privacy Guide. What you knowingly accept is put in writing.
What you get
What lands on your desk.
Controls tested, not collected
Mapped to the frameworks you already answer to, such as the NIST AI Risk Management Framework and ISO/IEC 42001.
Every mitigation owned
Each with an owner, a cost, a date and a residual score, and the option to accept. What you knowingly accept is written down.
Who you’ll speak to
Adam Fitton
Co-founder & Chief Technology Officer · MBCS
Twenty years in IT across public sector, transport, emergency management and higher education, bridging strategy, value-led AI architecture and delivery. Adam is behind our own AI applications and leads the AI architecture practice.
Read the profileMore from the practice
Other services in AI Architecture.
- AI Readiness Health Check Whether your estate can safely take AI, in five days.
- AI Platform and Access Decision Five shapes, one choice you can still defend in three years.
- AI Process Intelligence Where AI actually pays, measured rather than workshopped.
- AI Benefits Realisation Of everything promised, what actually landed?
How to buy
Fixed before you sign.
Fixed price
Every service is fixed once scoped at a scoping call, before you sign.
- Budget certainty for approval
- We carry the overrun risk
- Payment tied to delivery
Time and materials
For evolving scope or high-speed delivery.
- Pivot priorities without renegotiation
- Start immediately
- Scale resource to real demand
Hybrid
Fixed price for the core deliverables, time and materials for what evolves.
- Certainty for the roadmap
- Room for change
- One contract, two modes
Frameworks
Public sector clients can appoint us through the SparkDPS, AIDPS and SpaceDM frameworks.
Accreditations
Cyber Essentials · RISQS · JOSCAR
Independence
On this work we take no commission, hold no reseller or partner agreements, and our fee does not change with the recommendation.
Scope the AI Risk Management.
A short call to pin down what you need to decide, and by when. You leave with the shape of the engagement, fixed before you sign.