The AI risk picture
The threats that matter in business terms, and threat modeling at a strategic level: what could go wrong, and how badly.
For executives, boards and owners who approve, buy or answer for AI. Governance, risk and procurement, without the jargon.
The threats that matter in business terms, and threat modeling at a strategic level: what could go wrong, and how badly.
What the NIST AI Risk Management Framework, ISO/IEC 42001 and the EU AI Act each ask of an organization.
An AI use policy, acceptable-use rules and who owns them.
Supply chain risk for AI: assessing vendors, models and third-party AI tools, the data terms in their contracts, and security questionnaires.
What to require before AI agents get access to systems and data. Zero trust for agents: nothing an agent receives or produces is trusted by default, and every action it takes is checked.
Risk registers, board reporting, and how findings are scored, including the OWASP AI Vulnerability Scoring System (AIVSS).
Incident decisions at leadership level: containment, communication and lessons learned.
Dates on request.
None. No technical background required.
Tell us who needs training and when.