This is particularly suited to organisations that:

• Are preparing for ISO/IEC 42001 certification or want to align with the standard
• Are introducing Microsoft Copilot, Microsoft 365 AI tools, or other generative AI services
• Want to design internal AI agents or automation safely
• Need AI adoption aligned with information security, privacy, and compliance requirements
• Want practical governance rather than theoretical AI policy work
• Need structure, ownership, and oversight without hiring a full-time AI governance lead

What we provide

We help organisations build, implement, and operate an AI Management System (AIMS) aligned with ISO/IEC 42001, while also supporting the secure and practical adoption of AI tools. This includes governance design, risk and impact assessment, control alignment, role-based usage, training, evidence development, and implementation support for real business use cases.

ISO 42001 Readiness & Gap Assessment

• Review of current AI use, governance arrangements, documentation, and controls
• Assessment against ISO/IEC 42001 requirements
• Identification of gaps, risks, and improvement priorities
• Prioritised implementation and certification-readiness roadmap
• Clear ownership, timescales, and evidence requirements

AI Management System Build & Implementation

• AIMS scope, context, objectives, roles, and responsibilities
• AI policies, procedures, registers, and governance structure
• AI system and use-case inventory
• AI risk and impact assessment processes
• Risk treatment, control planning, and evidence development
• Internal audit, management review, and continual improvement support

AI Governance Framework & Risk Alignment

• AI governance aligned with information security and enterprise risk management
• Roles, accountability, oversight, and decision-making structures
• AI risk register and mitigation planning
• Data protection, supplier, and governance control mapping
• Acceptable use, procurement, and third-party AI controls

Copilot & Microsoft 365 AI Enablement

• Use-case design for teams such as Sales, Finance, HR, and Operations
• Data access, permissions, and information-governance validation
• Security, privacy, and compliance alignment
• Prompt libraries, workflows, and role-based usage guidance
• Safe-use guidance, training, and adoption support

AI Agents & Secure Automation

• AI agents using Power Automate, Python, SharePoint, Teams, and secure APIs
• Data-aware automations connected to business systems
• Logging, traceability, monitoring, and auditability
• Guardrails to reduce misuse, hallucinations, and data leakage
• Role-based access, approvals, and segregation of duties

AI Training & Adoption

• User training for Copilot, AI tools, and internal agents
• Secure, responsible, and policy-aligned AI use guidance
• Data protection and compliance awareness
• Role-based training for business and technical teams
• Support materials and ongoing enablement

Ongoing AIMS Governance & Compliance Support

• Regular review of AI use, risks, and new tools
• Governance, policy, and control updates
• AI risk register and treatment-plan maintenance
• Internal audit and management review support
• Advisory support for new AI initiatives
• Ongoing ISO 42001 readiness and continual improvement

Deliverables

• ISO 42001 gap assessment and implementation roadmap
• AIMS policies, procedures, scope, objectives, and registers
• AI system inventory, risk register, and impact assessments
• Acceptable use, procurement, and supplier governance controls
• Secure Copilot and Microsoft 365 AI configuration guidance
• Evidence of controls, logging, access management, and oversight
• Training, adoption, and certification-readiness materials