AI SECURITY & GOVERNANCE
AI Vendor Risk Review
Evaluate third-party AI tools and providers for data handling, retention, access and security controls.
SCOPE & DELIVERABLES
Secure AI adoption starts with visibility.
This is an advisory assessment, not a certification, penetration test or guarantee of compliance. Scope and evidence requirements are agreed before engagement.
✓ Vendor questionnaire and evidence request
✓ Data retention and training-use review
✓ Access and contractual risk considerations
✓ Risk register and findings
✓ Decision-ready recommendations
How we work
Discover current AI usage, assess controls and exposures, prioritize gaps, and provide practical next steps. Work may reference NIST AI RMF concepts where appropriate.