AI Use & Risk Baseline
Understand where AI is used and where governance attention is needed.
Who buys: IT director, COO, or security/GRC lead at a small or midmarket company.
Included
- • Use-case register
- • Information-handling questionnaire
- • Initial risk matrix / issue register
- • Acceptable-use policy draft
- • Executive briefing
Not included
- • Formal audit attestation
- • Legal opinion
- • Production security testing
- • Automated enforcement
Buyer inputs
- • Named sponsor
- • Approved documents
- • Staff contacts
- • Timeline
- • Redacted contextual evidence
Delivery assurance
Qualified project lead, versioned templates, review rubric, and agreed acceptance cycle.
Typically suited to lower-sensitivity, document-heavy work.
