Governing AI, in practice.

AI Feature Launch Gate (Interactive)

An interactive launch-gate that walks an AI feature through the safety, governance, and readiness checks required before it ships.

AI Lifecycle Tooling Library

A browsable library of tooling mapped across the AI lifecycle — data, build, evaluation, deployment, and monitoring — so teams can see what to use at each stage.

AI Use-Case, Tooling & Governance Explorer

An interactive explorer that maps AI use cases to the tooling, controls, and governance guardrails each one needs — from selection through deployment.

Cyber Risk Assessment

A structured, standards-aligned method for identifying assets, threats, and vulnerabilities, then rating each risk by likelihood and impact. Risk levels calculate automatically using the NIST SP 800-30 model.

Cybersecurity Audit Checklist

A complete controls audit covering all 18 CIS Critical Security Controls v8.1 — 153 safeguards — cross-mapped to NIST CSF 2.0 and ISO/IEC 27001:2022. Score implementation and filter by Implementation Group to scope to your maturity.

Security Architecture & Zero Trust

Assess and mature a zero-trust architecture across the five CISA pillars — identity, devices, networks, applications and workloads, and data — plus cross-cutting capabilities. Aligned to NIST SP 800-207 and the CISA Zero Trust Maturity Model 2.0.

Aegis AI Audit Checklist

A comprehensive assurance checklist for auditing AI systems against governance, safety, and control expectations.

AI Feature Launch Gate Playbook

The playbook behind the launch gate: the criteria, roles, and decision flow for approving an AI feature to go live.

AI Feature Launch Gate Tracker

A tracking workbook to run features through the launch gate — capturing checks, owners, decisions, and sign-off status.

AI Feature Safety & Privacy Launch Gate

A launch-gate workbook that checks an AI feature against both safety and data-privacy requirements before release — the privacy crossover of the launch-gate series.

AI Governance Playbook — Financial Institution

An end-to-end AI governance playbook tailored to a financial institution's regulatory, risk, and model-governance context.

AI Governance Playbook — Master Template

A reusable master template for building an organization's AI governance playbook — adapt the sections to your own context.

AI Risk Register

A reusable register for logging, scoring, and tracking AI risks with owners, mitigations, and residual-risk ratings.

AI Risk Register — How-To Guide

A step-by-step guide to setting up and running the AI Risk Register: fields, scoring, ownership, and review cadence.

✦ Supplied with AI Risk Register

AI Risk Register — White Paper

A white paper on why and how to run an AI risk register, and how it fits into a broader responsible-AI program.

✦ Supplied with AI Risk Register

AI Standards Study Guide

A study guide covering the major AI standards and frameworks — a reference for practitioners preparing for governance and assurance work.

Application Security & Secure SDLC

Embed security across the software lifecycle — requirements, threat modeling, secure implementation, testing, release, CI/CD, and AI/LLM applications. Aligned to OWASP ASVS 5.0, the OWASP Top 10:2025, and SAMM.

Business Continuity & Disaster Recovery

Build organizational resilience — a continuity program, business impact analysis, recovery strategy and backups, continuity and DR plans, testing and exercises, and plan maintenance. Aligned to ISO 22301 and NIST SP 800-34.

Cloud Security Assessment

Assess and harden cloud posture across nine control areas — shared responsibility, identity, data, network, logging, workloads, secrets, and cloud incident response. Aligned to CSA CCM v4.1, CIS Foundations Benchmarks, and provider best practice.

Cryptography & Key Management

Govern cryptography end to end — approved algorithms, the key-management lifecycle, PKI and certificate management, transport security, post-quantum readiness, and crypto governance. Aligned to NIST SP 800-57, FIPS 186-5, and the 2024 post-quantum standards.

Cyber Impact Assessment (BIA)

Quantify the business consequences of a cyber incident across five impact dimensions, set recovery objectives (RTO/RPO/MTD), and tier each process by criticality. Ratings follow the worst-case rule and feed directly into continuity and recovery planning.

Emerging AI Impact Assessment Model

A structured model for assessing the potential impact of emerging AI capabilities, with a companion write-up explaining how to apply it.

Emerging Capability Preparedness Review

A review template for assessing organizational readiness to handle emerging AI capabilities and the risks they introduce.

External Expert Consultation & Workshop Toolkit

A toolkit for running structured external-expert consultations and workshops — planning, facilitation, and capturing findings.

Financial Crimes AI — Cost-Benefit & ROI Model

A working model for quantifying the cost, benefit, and return on investment of AI initiatives across a financial-crimes program.

Financial Crimes AI — Explainability & Auditability Playbook

A practical playbook for making financial-crimes AI models explainable and auditable to regulators, model-risk teams, and internal audit.

Financial Crimes AI — Model Governance Framework

A governance framework defining roles, controls, and review gates for AI models used across anti-financial-crime functions.

Financial Crimes AI — Model Governance Pack

A ready-to-use workbook of model inventory, controls, and review tracking to operationalize governance for financial-crimes AI models.

Financial Crimes AI — Use-Case Prioritization Roadmap

A structured roadmap for scoring and sequencing financial-crimes AI use cases by value, feasibility, and risk.

Model Policy & Safety Review Crosswalk

A crosswalk mapping model policies to safety-review requirements, so teams can see how each policy is evidenced during review.

Network Security Hardening — Templates & How-Tos

Practical, standards-aligned hardening across eight domains — architecture, firewalls, remote access, wireless, device hardening, monitoring, and access control. Each domain pairs best-practice guidance with a step-by-step how-to and a trackable checklist.

Nigeria Oil & Gas — AI Strategy Pitch

A strategy pitch for applying AI responsibly across Nigeria's oil & gas sector — opportunities, value, and the governance to make it safe.

Oil & Gas — AI Use Cases

A catalog of high-value AI use cases across the oil & gas value chain, with the governance considerations for each.

OT / ICS / IoT Security

Secure operational technology, industrial control systems, and IoT — segmentation and the Purdue model, IEC 62443 zones and conduits, secure remote access, OT-aware patching and monitoring, safety systems, and IoT device hardening.

Privacy Program & Data Protection

Operate a defensible privacy program — governance and Privacy by Design, data mapping and ROPA, lawful basis and consent, data-subject rights and DSAR handling, DPIAs, cross-border transfers, vendors, and breach response. Aligned to GDPR and CCPA/CPRA.

Real-World Impact Monitoring Register

A register for monitoring the real-world impact of deployed AI — capturing incidents, harms, benefits, and follow-up actions over time.

Responsible AI Council — Briefing Pack

A ready-to-present briefing pack for a Responsible AI Council: mandate, agenda, decision rights, and standing reporting.

Threat Intelligence & Threat Modeling

Build a threat-informed defense — the intelligence lifecycle and tiers, MITRE ATT&CK, Kill Chain and Diamond models, STIX/TAXII sharing, structured threat modeling with STRIDE and PASTA, and operationalizing intelligence into detection and hunting.