U.S.-based advisory · Serving clients worldwide
FromRisk to Audit-Ready
Practical AI governance, risk, and compliance programs — aligned with the EU AI Act, ISO/IEC 42001, and NIST AI RMF — for organizations across the U.S. and worldwide.
EU AI Act · NIST AI RMF 1.0 · ISO/IEC 42001 · GDPR
Nabiha Sofia Herradi
LL.B · CISM · CISACIPP/E · CIPP/US · CMMC-CCP
15+ years in GRC
Three ways to work with us
Start with a document, a project, or a retainer — whichever matches where you are today.
Governance documents
Policy sets, registers, and assessment templates you can adapt and put into use the same week.
Readiness assessments
Where you stand against the EU AI Act, ISO/IEC 42001, or NIST AI RMF — with a prioritized remediation plan.
Fractional AI governance lead
Monthly support for committees, vendor reviews, and model intake while your program matures.
Documents that ship with an implementation plan
Every document is tailored to your size, sector, and risk profile. Instant-download templates are edited for your organization; toolkits are built with you.
$79
Instant download
AI Acceptable Use Policy
- Approved and prohibited uses
- Data handling rules for staff
- Tool approval workflow
- Editable Word file
From $299
Tailored · 1 week
AI Governance Starter Kit
- AI Governance Policy
- Acceptable Use Policy
- AI system inventory
- AI risk assessment
- Vendor questionnaire
$995–$2,500
Tailored · 2–4 weeks
EU AI Act & ISO 42001 Toolkit
- EU AI Act gap assessment
- ISO/IEC 42001 gap assessment
- AI impact assessment
- Everything in the Starter Kit
Handling CUI or working toward CMMC? That work lives at cyberdsc.com.
Read before you build
Two feeds: what changed in AI regulation this week, and how to actually do the work.
AI News
Regulatory moves, enforcement actions, and standards updates — summarized for the people who have to respond to them.
Learn
Step-by-step guidance on AI risk assessments, model inventories, vendor reviews, and career paths in AI governance.
Next step
Tell us where your AI program actually is.
Thirty minutes, no slides. You leave with the two or three things worth doing first — whether or not you hire us.