Complimentary assessment

A free AI risk assessment focused on your controls

Find out where your AI risk sits before it turns into an incident. We review your AI policies, procedures and controls, including APIs and AI agents, then give you a maturity view and prioritized recommendations at no cost.

Request the assessment
  • Complimentary, with no obligation
  • Remote interviews and working sessions
  • Mapped to NIST AI RMF, ISO/IEC 42001 and NIST CSF
Security advisor speaking on a video call

Top virtual CISO services company

Recognized by Cyber Security Review

30+ California cities assessed

Maturity assessments for public agencies through CJPIA

In business since 2016

Cybersecurity, compliance and managed IT from San Diego

Scope

What the complimentary AI risk assessment reviews

The assessment is focused on risk. It looks at how AI is governed and controlled in your organization today.

AI policies and procedures

Acceptable use rules, ownership of AI decisions, approval of new AI tools and how employees are told what is allowed.

Controls around APIs

How AI services connect to your systems and data, who holds the keys and how that access is limited and reviewed.

Controls around agentic AI

What AI agents can reach, what they can do on a user’s behalf and how their actions are logged and overseen.

Control maturity

How consistently each control is defined, applied and checked, measured against NIST AI RMF, ISO/IEC 42001 and NIST CSF.

What you receive

Findings you can act on

At the end of the assessment we walk your team through the results and leave you with a written summary.

  • Findings on your AI policies, procedures and controls
  • A control maturity view across the areas reviewed
  • Gaps grouped into clear risk themes
  • Prioritized recommendations, starting with what to fix first
  • Mapping to NIST AI RMF, ISO/IEC 42001 and NIST CSF
  • A results walkthrough with your stakeholders

How it works

Four steps from request to results

The work runs remotely. The overall timeline depends mostly on how quickly we can schedule interviews with your stakeholders, and we agree dates with you at the start.

1

Request and scope

Send the form. An advisor confirms who should take part and which AI tools, APIs and agents are in view.

2

Interviews and working sessions

We hold remote interviews and working sessions with IT, security and business stakeholders, and review the documents you share.

3

Maturity assessment

We assess each control, score its maturity and group the gaps into risk themes mapped to the frameworks.

4

Results and recommendations

We present the findings, the maturity view and a prioritized list of recommendations, and answer your questions.

Who it suits

Built for organizations already using AI

The assessment suits organizations whose employees already use AI tools, or that are connecting AI to their own systems through APIs and agents. It is most useful when leadership wants a clear answer to how well AI is governed today and what to do next.

It works for teams with a formal security program and for teams just getting started. If you need a broader AI roadmap or a deep technical test afterwards, we’ll tell you which service fits.

  • IT and security leaders asked to sign off on AI use
  • Regulated organizations that must show auditors how AI is controlled
  • Teams rolling out AI assistants or building AI agents
  • Executives preparing to brief the board on AI risk

Next steps, if you want them

Where the results can lead

Many clients use the recommendations to scope follow-on work. There is no obligation.

  • AI governance and policy
  • AI readiness assessment and roadmap
  • Shadow AI assessment
  • AI penetration testing

FAQ

Questions about the free AI risk assessment

Yes. There is no cost for the assessment and no obligation to buy anything afterwards. If you want help with the recommendations, we’ll scope that separately.

It reviews your AI-related policies, procedures and controls, including controls around APIs and agentic AI. It is a risk and control review based on interviews, working sessions and your documentation. It does not include hands-on penetration testing of your AI applications.

The timeline depends on how many stakeholders take part and how quickly interviews can be scheduled. We agree the schedule with you during scoping, and most of your team’s time goes into a small number of remote sessions.

Findings are aligned to the NIST AI Risk Management Framework, ISO/IEC 42001 and the NIST Cybersecurity Framework. That gives you results you can reuse in audits, board reporting and future AI governance work.

Usually someone from IT or security, a leader who owns AI decisions and representatives from the business teams that use AI most. We’ll suggest the right people when we scope the assessment.

You keep the findings and recommendations whether or not you work with us again. If you want support, we can help with AI governance and policy, a readiness assessment or AI penetration testing.

Request the assessment

Request your complimentary AI risk assessment

Tell us a little about your organization and how you use AI. An advisor will reply by email to confirm scope and schedule the first session.

  • Complimentary, with no obligation
  • Prioritized recommendations aligned to NIST AI RMF and ISO/IEC 42001

Prefer email? Write to [email protected] or call (858) 712-0040.

Send us a message