Sustain
Risk & governance
Two modes, same independence: design a governance structure from scratch, or audit one you already have.
Two modes, same independence
Design
No governance structure exists yet
You're scaling AI or new systems without a governance model you trust: permission sprawl, unclear ownership, policies that exist on paper but nobody follows. Built for how your organization operates, for your team to run.
Audit
A structure already exists
Inherited or your own: an independent check on whether it holds up, where the gaps are, and whether it's being followed as well as documented.
What you get
- Design mode: a governance structure built for how your organization operates, for your team to run, not for us to run indefinitely
- Audit mode: a direct assessment of what's working, what isn't, and what to fix first
- Decision rights, policies, and cadence: a structure built to be run, not a document to be filed
Engagements are scoped and quoted at a fixed fee before any work begins.
Related work and reading
All evidence →Case study
The trading desk had built its own tools over the years. The regulator had a view on that.
Banking firm
Case study
The warehouse teams had built their own automation. They hadn't needed an IT project to do it.
National distribution company
Article
Governance · Power Platform
Microsoft changed the Power Platform governance playbook. Has your tenant caught up?
Microsoft's governance tools haven't changed much. How it says to use them has. Environment groups, routing and agent controls now enforce what used to live in a deck.
Article
AI · Governance
AI agents broke out of a lab test, then hid it
Two frontier labs, two separate incidents, one shared root cause: an access boundary that was supposed to be isolated and wasn't. Four things to check in your own environment this month.
Article
AI · Governance
Two ways in: designing governance, or auditing it
Some organizations need a governance structure built from nothing. Others already have one on paper and need an honest read on whether it's real.
Check whether your governance holds up.
No obligation: an honest read before anything is scoped.