ServicesGovern, ongoing

AI Governance Advisory

A monthly retainer that keeps the program current as your company adopts new AI.

CadenceMonthly
AvailabilityAfter any engagement above
PricingFixed monthly retainer

What's included

Governance that stays current

AI governance isn't a one-time project. New tools appear, regulations change, and the risk register drifts if no one owns it. The advisory retainer gives you a senior security operator to keep the program running — without hiring a full-time AI risk function.

Monthly risk register review

We review the AI risk register each month — updating risk ratings, closing resolved items, and flagging new exposures as your AI use evolves.

Use case review and approval

When your team wants to adopt a new AI tool or use case, we run it through the intake process and give you a documented approval or recommendation.

Policy updates

We update the acceptable use policy and approved-tools list as tools change, regulations shift, and your company's risk tolerance evolves.

Quarterly leadership report

A concise report for your board or leadership team covering AI risk posture, program activity, and any material changes since the last quarter.

Monthly deliverables

What you receive each month

Updated risk registerA current, maintained register of AI tools and use cases with refreshed risk ratings and owner assignments.
Use case decisionsDocumented approvals or recommendations for any new AI tools or use cases submitted during the month.
Policy change logA record of any updates made to the acceptable use policy or approved-tools list, with rationale.
Quarterly board reportEvery third month: a one-page summary of AI risk posture and program activity for leadership.

Right for you if

  • You've completed a governance setup and need someone to keep it running.
  • Your team is adopting new AI tools faster than your governance process can keep up.
  • You need ongoing evidence of AI oversight for auditors, regulators, or enterprise customers.
  • You want a senior security operator on call without the cost of a full-time hire.

Start here

Foundation bundle

Most advisory clients start with the three-engagement foundation: AI Risk Assessment, Acceptable Use Policy, and Governance Setup — delivered in sequence over 8 to 10 weeks.

Book a 30-minute AI exposure review

A free call for security leaders. You leave with a clearer view of your AI exposure, whether or not you hire us.