- 01THE PROBLEMGrowing use of artificial intelligence without defined roles, risks or controls.
- 02WHO IT IS FOROrganizations that develop or use AI systems and need to govern them.
- 03INTENDED OUTCOMEInventory of AI systems, risks assessed, roles defined and controls monitored.
FOR DECISION MAKERS
What changes for decision makers.
- FOR THECEOUsing AI without losing control“AI enters through the teams faster than the company can decide on it.”Known AI uses, assessed risks and defined roles.
- FOR THECTOClear rules for builders“Each team decides on its own which model to use and with which data.”A use policy, an inventory and criteria for putting AI into production.
- FOR THELegalRegulation in motion“The Brazilian AI bill and the EU AI Act change what is required of those who use AI.”A management system ready to keep up with regulation.
- FOR THEComplianceAnswering whoever asks“Customers and partners ask how the company governs AI, and there is no ready answer.”Inventory, assessments and controls recorded, with evidence.
WHERE AI IS
Governance for what is already in use.
AI usually enters the company before the rules do. The first step is knowing where it is.
Scroll sideways to see the whole diagram
- In-house systems
- Models developed internally
- Third-party AI
- Embedded in products
- Use by teams
- Assistants and tools
- Training data
- Origin and rights
VISIBILITY
AI uses under tracking.
The inventory of AI uses, risk assessments and controls sit in n.360 in real time. At each periodic review, leadership sees new uses, the risks and what calls for a decision.
LIFECYCLE OF AN AI SYSTEM
From inventory to review.
Each relevant system goes through the same questions.
- STAGE 01InventoryWhere is AI used?
- STAGE 02ClassifyWhat is the impact if it gets it wrong?
- STAGE 03ControlWho reviews the outputs?
- STAGE 04MonitorHas performance changed?
- STAGE 05ReviewDoes the use still make sense?
WHAT WE DO NOT DO
Governance, not promises.
The focus is roles, risk and control, not a “safe AI” seal.
- ISO/IEC 42001AI management systemA foundation for organizing roles and controls.
- PRIVACYIntegrated with LGPDPersonal data in AI handled within the same program.
- THIRD PARTIESVendors assessedContracts and how providers use data.
- LIMITNo technical model evaluationUnless contracted separately.
WHAT SETS US APART
Why trustness.
- 01ISO/IEC 42001The AI management system follows the international standard, with preparation for the certification audit.
- 02Regulation trackedThe Brazilian AI bill and the EU AI Act feed into the risk assessment and the controls.
- 03Governance, not promisesThe focus is inventory, risk, roles and controls, not a generic promise of safe AI.
- 04Alongside privacyWhen AI processes personal data, the assessment connects to the LGPD (Brazil's General Data Protection Law) program.
HOW IT WORKS
Stages of the work.
- 01Inventory of AI uses
- 02Risk and impact assessment
- 03Policies, roles and controls
- 04Monitoring and continuous improvement
SCOPE
What is included.
Included3✓Inventory and assessment✓Policies and roles✓Controls plan
Subject to contract2○Technical assessment of models○Ongoing follow-up
PEOPLE, TOOLS AND THIRD PARTIES
How we work with what you already have.
The focus is governance, risk and roles, not a generic promise of “safe AI”.
- 01Your teamThose who use and build AI record their uses and follow the policy; trustness. runs the method.owners of the uses
- 02The toolsTools and models you use go into the inventory; nothing is replaced.inventoried
- 03AI suppliersIncluded in the risk assessment and in the contracts.assessed
| Activity | trustness. | Your team | Third parties |
|---|---|---|---|
| AI use inventory | coordinates | executes | — |
| Risk and impact assessment | executes | approves | — |
| Policy, roles and controls | executes | approves | — |
| Decision on each use | supports | executes | — |
HOW TO ENGAGE
Three models, as set in the contract.
- MODEL 01Compliance programImplementation of the AI management system based on ISO/IEC 42001.
- MODEL 02Posture assessmentInventory of AI uses and assessment of the risks and applicable regulation.
- MODEL 03AuditIndependent verification of the AI management system.
FREQUENTLY ASKED QUESTIONS
What people usually ask us.
We only use third-party AI tools. Does this apply?
Yes. Using AI also brings risks and obligations; the inventory starts with uses, not models.
Is the Brazilian law already in force?
The bill is still under consideration. Governance prepares the company for it and for the EU AI Act, which already applies to those operating in Europe.
Do you evaluate models technically?
Technical model evaluation can be part of the scope; the program focuses on governance, risk and roles.
How does this relate to the LGPD?
When AI processes personal data, the two assessments go together.
Want to know if AI governance fits your situation?
- conversation
- assessment
- proposal