EmDash preview Existing customers: Get support

AI governance & security

Set the rules for AI use at work.

An employee can introduce a new AI tool before IT knows it is being used. We help you assess the tool, protect confidential information and decide which tasks need approval or human review.

Discuss AI use in your organization
Zen Cyber team discussing policies, risk and security responsibilities
AI policy, risk review and staff guidance
Home / AI governance & security

AI advisory services

Give staff rules they can follow.

Start with the information they handle and the decisions the tool will influence.

We help you review current AI use, assess proposed tools and identify the data and business processes involved. The work can cover supplier terms, account permissions, connected systems, retention settings and human review of outputs.

We use the review to develop an acceptable-use policy, approval process and staff guidance. These need to fit your existing privacy, security and supplier-management arrangements.

What we review

Assess the tool and the task.

A single proposed use is enough to begin a review.

01 / Understand

Find out where AI is being used

Identify tools, users and business tasks, including services adopted outside the normal purchasing process. Note what information enters each tool and where the output is used.

02 / Protect

Review access and data handling

Examine permissions, connected data sources and vendor settings. Define which information must stay out of a tool and how confidential or personal information will be protected.

03 / Govern

Set approval and review rules

Define permitted uses, prohibited uses, ownership and human review. Consider inaccurate results, harmful instructions in source material and actions an AI-connected tool could take.

04 / Equip

Help staff use the policy

Use examples from the team's work to explain the rules, where to ask about a new tool and how to report a concern.

How we begin

What do you want to use AI for?

We assess the proposed task before deciding which controls it needs.

01

Review the intended use

Discuss who will use the tool, the information involved and the consequences of an incorrect result or unintended action.

02

Set the controls

Document access limits, information-handling rules and required approvals. Record why a proposed use is allowed, limited or declined.

03

Support adoption and review

Prepare the policy and staff guidance, then agree when to review changes to the tool or its use.

Let's talk

Which AI tools are your people using?

Bring the service you are using, the rollout you are considering or the staff question you need to answer.

Discuss AI governance