The register.

12 practice areas
46 services
Twelve tabs

Read as a whole, the register is the chain an AI programme runs along. Strategy and readiness establish the exposure. Governance and third-party work make it ownable. Architecture, agentic security and testing make it defensible. Monitoring, training, transactions and enablement keep it that way.

Each service below opens onto its own page with its reference, what it does, and the artefacts you receive. Nothing is priced here; scope follows the briefing.

Tab B Strategy & Readiness

Establish where AI is already used, how ready the organisation is to use it safely, and what the board should decide first.

SR-01

AI Security Briefing / Discovery Workshop

Gives leaders a short session about AI risk, current AI use and the next steps.
SR-02

AI Readiness & Maturity Assessment

Measures how ready the company is to use AI safely. Finds gaps in controls, data and people. Gives a roadmap.
SR-03

AI Risk Assessment & Risk Register

Finds and scores AI risks across systems, models, data and use cases. Records them in a risk register with owners.
SR-04

AI Vision & Strategy

Finds where AI can give business value and makes a roadmap for secure adoption.
SR-05

AI Use Case Triage & Risk Tiering

Examines each proposed AI use case and sorts it by risk before the company builds it.
SR-06

AI Platform Adoption Security Review

Examines AI platforms and SDKs (for example OpenAI, Vertex AI, Hugging Face) before the company adopts them.

Tab C Shadow AI & Visibility

Find the AI already in use without approval, then replace it with sanctioned tools held under control.

SA-01

Shadow AI Discovery & Inventory

Finds AI tools, agents and browser extensions that people use without approval. Makes an inventory with risk ratings.
SA-02

Sanctioned AI Enablement

Replaces public AI tools with approved enterprise AI tools and sets safe configurations.
SA-03

Enterprise AI Assistant Secure Deployment (for example Copilot)

Labels sensitive data and repairs file permissions before an AI assistant goes live, so the assistant does not show data to the wrong people.
SA-04

AI Access & Usage Control

Sets which users can use which AI tools, and how. Applies these rules in real time.

Tab D Governance, Risk & Compliance

Put roles, policies, controls and regulation around AI so that it can be governed, evidenced and audited.

GR-01

AI Acceptable Use Policy & Policy Stack

Writes or updates AI policies: acceptable use, model approval, role-based rules and an incident response addendum.
GR-02

AI Governance Framework & Operating Model

Sets roles, decision rights, committees, risk processes and controls to manage AI across the company.
GR-03

AI Controls & Guardrails Framework (policy level)

Defines the AI controls and maps each control to the frameworks that auditors use.
GR-04

AI Regulatory Mapping & Compliance Assessment

Shows which AI laws and standards apply and what the company must do. Includes requirements across countries.
GR-05

ISO/IEC 42001 Readiness & Certification Support

Prepares an AI management system for ISO/IEC 42001 certification. Does gap analysis, internal audit and control tests.
GR-06

Continuous AI Governance & Assurance (managed)

Gives ongoing oversight of AI risk, compliance and control performance, not only point-in-time reviews.
GR-07

AI Ethics, Bias & Responsible AI Review

Examines AI models and data for bias, fairness, transparency and accountability. Makes model cards and impact assessments.

Tab E Third-Party & Data Risk

Examine the vendors and the data that AI systems touch, and control what leaves the organisation.

TP-01

Third-Party / Vendor AI Risk Assessment

Makes criteria to examine vendors that use AI on your data. Assesses those vendors.
TP-02

AI Data Security & DLP for AI

Finds sensitive data in AI prompts, uploads and responses. Sets controls to block, hide or label it.
TP-03

AI Privacy & Data Protection Advisory

Maps personal data in AI systems. Sets privacy controls, consent and consumer rights for automated decisions.

Tab F Secure AI Architecture & Engineering

Design the security of AI systems before they are built, and put guardrails on what already runs.

AE-01

Secure AI Architecture Design & Review

Designs or reviews the security architecture of AI systems: model hosting, data stores, APIs and integrations.
AE-02

AI Threat Modeling

Finds how attackers can misuse or attack an AI system, early in the design.
AE-03

Secure AI SDLC & MLOps Security

Adds security requirements, reviews and automatic tests to how teams build, train and deploy AI.
AE-04

AI Guardrail Design & Implementation

Designs and installs runtime guardrails that block prompt injection, unsafe output and data leaks.

Tab G Agentic AI Security

Give agents their own identity, least-privilege access and hard limits before they are allowed to act.

AG-01

Agentic AI Security Assessment

Examines AI agents, their tools, access rights and integrations for unsafe actions and privilege misuse.
AG-02

AI Agent Identity & Access Management

Gives each AI agent its own identity, least-privilege access and continuous authorization.
AG-03

Agent Safety Controls & MCP Governance

Sets agent permission limits, human approval steps, shutdown procedures, approved MCP server lists and audit logs.
AG-04

AI Software Supply Chain Security

Checks AI models, packages and datasets from outside sources. Blocks malicious ones.

Tab H Testing & Validation

Attack the AI, prove what it does under adversarial conditions, and prove it again after repair.

TV-01

LLM / AI Application Penetration Testing

Tests LLM applications and APIs for prompt injection, data leaks, jailbreaks, excessive agency and API abuse. Tests again after repairs.
TV-02

AI Red Teaming

Simulates real attackers against AI systems, agents and the people and processes around them.
TV-03

Guardrail & Jailbreak Testing

Tries to go around the guardrails of AI models and applications with known and custom jailbreaks.
TV-04

AI Infrastructure Penetration Testing

Tests the cloud, containers, APIs and hosting that operate AI systems.
TV-05

AI Exposure Snapshot Scan

Does a quick, mostly automatic technical scan to show AI exposure across the environment.
TV-06

AI Model Assurance & Validation

Tests if AI models are reliable and robust, and operate as intended, including drift and adversarial robustness.
TV-07

AI Runtime Defense Analysis

Monitors AI in production and attacks it with adversarial inputs to test detection, logs and response.

Tab I Monitoring, Response & Resilience

Watch AI in production, and contain, investigate and repair when it is attacked or misused.

MR-01

Managed AI Security Monitoring / AI Detection & Response

Monitors AI activity at all times and responds to AI threats with an AI security platform.
MR-02

AI Incident Response Planning, Playbooks & Tabletops

Makes AI incident response plans and step-by-step playbooks. Tests them in tabletop exercises.
MR-03

AI Incident Response (breach response)

Contains, investigates and repairs incidents where AI systems or agents are attacked or misused.

Tab J Training & Leadership

Give the board, the workforce and the people who build AI the knowledge the programme depends on.

TL-01

Fractional AI CISO / AI Security Advisor (vCISO)

Gives a part-time senior leader who owns the AI security program, policies and board reports.
TL-02

Executive & Board AI Risk Briefings

Teaches leaders and boards about AI risk, their duties and the questions to ask.
TL-03

Workforce AI Security Awareness Training

Teaches employees about AI risks, safe use and data protection.
TL-04

Developer Secure AI Training & Survey

Trains developers to build secure AI. Surveys their practices to find weak areas.

Tab K Transactions

Examine AI risk, governance, dependencies and value inside a company before a deal closes.

TX-01

AI Due Diligence for M&A and Private Equity

Examines AI risk, governance, dependencies and value in a company before a deal.

Tab L AI-Enabled Threat Defense & SecOps

Prepare for attackers who use AI to move fast, and put AI to work inside the security operations team.

DT-01

AI-Enabled Threat Readiness (frontier AI exploit defense)

Prepares the company for attackers that use AI to find and use weaknesses fast. Uses continuous scans and fast repairs.
DT-02

AI for Security Operations Readiness

Finds use cases and makes a roadmap to use AI safely in the security team (SOC).

Tab M Technology Enablement

Select, install and run the security products the AI programme depends on.

TE-01

AI Security Tool Selection, Implementation & Management

Helps clients select, buy, install and operate AI security products.

Prepared by

Reviewed by

Approved by

Availability

We are not accepting new clients at present. The register of services stays published, and it is written to be acted on without us.

Read the availability note