The Analyst
Maps your tools, access and data flows, then scores control gaps against ISO 27001 and NIST CSF.
Solutions · AI Security Readiness
AI Security Readiness Kit™
Know your AI risk. Verify every change. Stay audit-ready. AI tools are spreading faster than the controls around them. The Kit gives regulated organizations a structured way to assess AI risk, check every change against policy before it goes live, and keep a traceable record that supports your compliance program.
The questions you're now being asked
"Which AI tools does your organization use, and what data can they reach?"
"How do you stop an AI-driven change from breaking policy?"
"Can you show us the record of what was assessed and fixed?"
Assessment first
See the AI risk you can't see today
Act on evidence instead of guesswork.
Unmanaged AI tools, over-permissioned accounts and undocumented data flows are the gaps auditors, insurers and regulators now ask about.
The Kit starts by mapping your AI environment, including tools, access and data flows, against recognized control frameworks. You get a prioritized view of what is exposed and what to fix first, scored so you can track progress over time.
Built on AI-SAMA
Four AI workflows. One verified system.
AI-accelerated, human-reviewed. Every output is reviewed by a person before it reaches you.
The Verifier
A pre-execution policy gate. Every fix or integration is checked against policy before it goes live.
The Responder
Drafts incident triage steps and tracks resolution against your playbooks, so your team responds faster.
The Intelligence Officer
Keeps findings current against the live threat landscape, so your risk picture isn't frozen at kickoff.
Readiness you can show an auditor
One platform. Three tiers.
Findings, fixes and re-checks are logged as a traceable record of what was assessed, what changed and when. Choose the tier that matches your exposure.
AI risk assessment
Map your AI environment and score control gaps against ISO/IEC 27001, NIST CSF and Zero Trust.
- AI tool, access and data-flow inventory
- Scored control-gap report
- Prioritized remediation plan
Verified remediation
Everything in Core, plus fixes checked by the Verifier before they go live and a logged evidence trail.
- Pre-execution policy verification
- Re-checks after every fix
- Evidence trail for auditors and insurers
Continuous monitoring
Everything in Regulated, plus ongoing monitoring with the Intelligence Officer and analyst oversight.
- Continuous control monitoring
- Threat-landscape updates
- Human-reviewed escalations
The Kit builds your readiness. Certification stays with your accredited auditor. One platform price per tier, with multi-year agreements priced annually and no upfront annual payment required.
Framework alignment
Mapped to the frameworks your auditors use
| Framework | What the Kit maps | Why it matters |
|---|---|---|
| ISO/IEC 27001 Annex A | Access control, supplier relationships, asset inventory and change management for AI tools | The control set most enterprise clients and insurers ask about |
| NIST CSF 2.0 | Govern, Identify, Protect, Detect, Respond and Recover outcomes for AI use | A common language for boards, regulators and public-sector buyers |
| Zero Trust | Identity, least-privilege access and verification of every AI integration | Stops AI tools from inheriting more access than they need |
Free self-assessment
Find out what your AI adoption is exposing
A short, guided self-assessment of your AI tool use, data exposure and security hygiene. You get a scored snapshot and the three areas to look at first.
About ten minutes
Plain-language questions. No technical knowledge needed.
Scored results
See where you stand against ISO/IEC 27001 and NIST CSF themes.
No obligation
A clear picture of your exposure, not a sales pitch.
FAQ
About the Readiness Kit
What is an AI security readiness assessment?
It is a structured review of which AI tools your organization uses, what access and data they have, and which security and governance controls are missing, scored against ISO/IEC 27001, NIST CSF and Zero Trust principles.
What does the Verifier do?
The Verifier is a pre-execution policy gate. Before a fix, configuration change or new integration goes live, it is checked against your security policy, so problems are stopped before they reach production.
Which tier is right for us?
Core suits organizations that need a clear assessment. Regulated adds verified remediation and an evidence trail for audits. Enterprise adds continuous monitoring. We recommend a tier after a discovery call.
Will the Kit certify us?
No. The Kit builds and documents your readiness. Certification is issued by your accredited auditor.
Find Out Where Your AI Risk Really Stands
One platform. Three tiers. Scaled to your compliance requirements. Tell us about your environment and we'll recommend the right tier.