A useful place to start
Three scoped starting points within our four advisory capabilities. These constructed examples show the decisions each can support.
Test the value
A sales team takes too long to prepare a reliable quote.
You leave with A costed recommendation, a simpler baseline and the evidence needed to proceed.
One business area. Up to three workflows screened. One priority business case.
See the example and scopeChoose the architecture
Another platform promises to fix a disconnected business.
You leave with A recorded option decision and a roadmap your delivery team can use.
One AI system or one bounded enterprise transformation decision.
See the example and scopeReview cyber exposure
Customers are asking how your public-facing systems are protected.
You leave with An executive summary, technical evidence and priorities for the responsible team.
One entity, one primary domain and up to five agreed public hosts. A standalone cyber assessment or part of a wider review.
See the example and scopeConceptual method. No client findings.
Fees and timing follow the agreed scope. Smaller assessments are paid upfront. Larger engagements use agreed stages. Work begins when the required payment arrangement, inputs, permissions and delivery capacity are confirmed.
The wider field
Discovery, design, review and ongoing advice sit within four capabilities. We agree the question, scope and reviewer before work starts.
Make the investment decision. Design how it will work. Give your delivery team a practical roadmap.
You have an AI idea, a vendor proposal or a system that needs an independent review.
Compare build-or-buy options, costs and controls before committing AI budget.
Choose the right system and design how it will work, with cost, security and evaluation addressed. Your team or chosen delivery partner carries out the build.
Illustrative situation Your team wants an assistant that answers questions from company documents.
The decision Choose what it may access, how answers will be checked and whether an existing tool is sufficient.
You are consolidating platforms, reviewing cyber exposure or planning a larger transformation.
Make your systems work together, with cost, cybersecurity and resilience addressed.
Connect business capabilities, systems and investment decisions. Address cybersecurity, identity and resilience in the architecture, then define the transition and your delivery team’s responsibilities.
Illustrative situation Several teams are buying overlapping systems and copying the same customer data.
The decision Decide which capabilities and platforms to share, which to retire and how to make the transition.
Establish accountability. Assess the evidence, privacy and impact of AI decisions.
You need oversight of AI use, evidence for procurement or a clearer view of your obligations.
Give AI decisions clear owners, approval gates and evidence for regulatory responsibilities.
Establish who owns AI decisions, which controls apply and what evidence is needed, including privacy and regulatory responsibilities.
Illustrative situation Staff use AI tools for customer work, but nobody owns the inventory or approval rules.
The decision Agree permitted uses, accountable owners, data-handling rules and the evidence needed before approval.
A system needs approval, handles personal data or is changing in ways that affect its risk.
Identify harm, privacy and control gaps before approving a system or expanding its use.
Assess how an AI system affects people and the organisation, including privacy, cybersecurity and operational controls. Document the evidence and the decision before committing.
Illustrative situation An AI tool will process personal information or influence a decision about a person.
The decision Assess the impacts, test the control evidence and record whether to proceed, change the design or escalate.
Cybersecurity
Your website, email, public services and AI tools need clear security decisions. We review agreed exposure, assess the architecture and give your team evidence and priorities.
Review agreed public systems, with dated evidence, validation status and priorities for the responsible team.
View the cyber assessmentReview identity, access, integrations and resilience as part of an Enterprise Architecture engagement.
Explore security architectureReview controls for data access, tool permissions, prompt injection and human approval within AI Architecture and AI Risk & Impact Assessment.
Explore AI security reviewA cyber exposure assessment does not require an AI project. We agree the exact targets, methods and written authority before work starts.
Evidence → Judgement → Action
For a cyber exposure review, see how dated observations become an executive judgement, a technical record and prioritised actions.
Illustrative structure. No client findings.
View representative sampleThe business consequence and the decision it needs.
Agreed coverage, dated observations and validation status.
Priorities, owners, limitations and the next verification.
The work, carried through
Your engagement has a relationship owner, an identified technical approver and agreed acceptance criteria.
Confirm the business decision, outputs, fee, timing, responsibilities and review.
Complete the payment arrangement, required evidence and permissions before work begins.
We validate the work, obtain the appropriate technical approval and discuss the findings with you.
Record acceptance, resolve agreed clarifications and hand over the recommendations to your team or chosen delivery partner.
Independent advice for UK and EU organisations.
Our team combines AI, architecture, governance and cybersecurity expertise. Each engagement has a relationship owner and an appropriate technical reviewer.
We assign reviewers according to the question, expertise and evidence your engagement needs. The scope identifies the adviser and technical approver. We remain accountable for the agreed advice.
Your team or chosen delivery partner implements the recommendations. Assessments do not establish certification or guarantee an outcome.
Practical analysis of AI, architecture, governance, cybersecurity and the evidence behind technology decisions.
Your next decision
Tell us the business problem, the decision and any deadline. We will identify the appropriate next step and confirm what can be delivered.