AI Readiness & Risk Assessment
Two weeks to a memo your board can act on.
Fixed fee
This AI readiness assessment takes two weeks of interviews and reading your systems, ending in a memo your board can act on. You learn where you stand against the frameworks your customers ask about, what a customer audit would find today and which three processes are worth automating first. The fee is credited if a Sprint follows within three months.
Published · Updated
Who this is for
This is for you if
- You have run pilots and none of them is in production
- A customer or investor has started asking who owns AI risk
- You need a written position before the next board meeting
This is not for you if
- You want a slide deck about AI strategy in general
- You have no engineers and no plan to hire any
- You are looking for a tool recommendation only
What you get
- Readiness score across strategy, data, delivery, people and governance
- Gap list against NIST AI RMF, ISO/IEC 42001 and the EU AI Act
- Inventory of the AI tools and data flows already in the building
- Three processes ranked by what automating them is worth this quarter
How it runs
Interviews
Six to ten conversations across engineering, product, legal and the people doing the work by hand today.
Systems read
I read the repositories, the data flows and the vendor list, rather than asking you to describe them.
Memo
One document, pulling together everything above.
| Stage | What happens | What you get |
|---|---|---|
| Interviews | Conversations across engineering, product and legal | Direct answers from the people doing the work. |
| Systems read | Repositories, data flows and the vendor list | The inventory of AI tools and data already in the building. |
| Memo | Interviews and systems read, written up | The readiness score, the gap list and the three processes worth doing first. |
In my words
What this is
Two weeks. I interview the people doing the work and read your systems and your vendor list. I write one memo you can hand to a board or a customer.
What you keep
You keep one document, whether or not you continue. It holds the readiness score, the gap list, and the three processes ranked by what automating them is worth this quarter.
ISO/IEC 42001 gap assessment
The gap list compares your company with ISO/IEC 42001, the standard for an AI management system that an accredited body can certify. It shows where you fall short of what the standard asks.
This is a gap assessment, not a certification. An accredited body runs the independent audit that grants certification, and the certification FAQ covers the difference between a working system and a certificate.
Why it is two weeks and not two days
A readiness claim you cannot show evidence for is worth nothing in a security review. I read the code, talk to the people who use the tools, and check what your vendors actually do with your data. Two weeks is the shortest span in which I can do all three.
What people ask
Who needs to be available?
One engineer who knows the data, one person who owns the process, and whoever signs vendor contracts. Two hours each, spread over the two weeks.
What do I get at the end?
The memo covers your position, the audit gap and the ranked shortlist, all in one document.
Is the fee credited if we continue?
Yes. If you go on to a 90-Day Production Sprint within three months, the full Assessment fee comes off the Sprint price.
Sources and neighbours
Sources
- AI Risk Management Framework
NIST · retrieved 2026-09-08
- ISO/IEC 42001:2023 — Information technology — Artificial intelligence — Management system
ISO/IEC · retrieved 2026-09-08
- Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act)
EUR-Lex · retrieved 2026-09-08
Related questions
- How do you charge for the work?
- What does the two-week Assessment produce, and is the fee credited if we continue?
- What happens on a fit call, and does it cost anything?
- What's the difference between the Assessment, the Sprint and the Retainer?
- Who owns the frameworks, templates and playbooks built during the engagement?