Advisory services in AI Governance, ISO 42001 and AI Act

ISO/IEC 42001 Readiness & Implementation Advisory

Regulatory Benefits: ISO/IEC 42001 requirements largely cover the areas of risk management, transparency, oversight, and governance expected by the European AI Act. By implementing AIMS, an organization gains a solid foundation for building compliance with the AI Act – even before full harmonized standards come into force.

Comprehensive preparation of the organization for the implementation and certification of the Artificial Intelligence Management System (AIMS) in accordance with ISO/IEC 42001.

• Gap Assessment against ISO/IEC 42001
• AIMS design and documentation (policies, procedures, roles, registers, controls)
• Conducting AI Risk Assessment and Impact Assessment
• Linking AIMS with existing management processes - e.g., ISO 27001
• Human Oversight over AI (HITL) in a systemic approach
• Implementation roadmap (usually 3–6 months, depending on organizational scale)
• Preparation for certification audit

AI Act Pre-Compliance

Support in preparing the organization for EU AI Act requirements – before full harmonized standards and detailed supervisory guidelines come into force. We focus on the operational side: processes, compliance evidence, and audit readiness.

• AI System Classification (Prohibited, High-risk, GPAI, Limited-risk)
• Organization Role Analysis (Provider / Deployer)
• Transparency Requirements (including Art. 50) – preparing processes and evidentiary materials
• Scope and structure of AI Act documentation (evidence pack)
• Fundamental Rights Impact Assessment (FRIA)
• Designing AI risk management mechanisms (processes, registers, controls)
• Preparation for future audits and inspections

AI Governance Framework for Organizations

We design practical artificial intelligence management frameworks for the entire organization – both where ISO/IEC 42001 implementation is planned and where an orderly approach to AI is needed without formal certification.

• AI Policy and Responsible AI Use Principles
• Oversight structure and role division in the AI area
• AI System Register and classification of their business importance and risk
• Data usage principles in AI systems (Data Governance & Privacy)
• Human oversight principles and AI output control
• Monitoring, reporting, and AI system review model
• Procurement process, approval, and withdrawal of AI systems

AI Project Advisory

Project advisory focused on ensuring AI initiatives align with the adopted AI Governance Framework, ISO/IEC 42001 requirements, and the European AI Act – from the concept stage (PoC) to production deployment.

• Strategic support in designing products compliant with regulations (Compliance by Design)
• "Go/No-Go" assessment for AI projects at the idea stage (ethics, law, profitability)
• Architecture verification for Security by Design and Privacy by Design
• Vendor Due Diligence – security audit of suppliers and external models
• Designing technical "Guardrails" for AI systems