AI Consultancy

OUR AI CONSULTANCY SERVICES

AI legislation in the E.U. applies on a global basis, as with the E.U. GDPR, regardless of geography for entities operating in the European Union. Compliance for AI requires a broad range of actions.

We are able to provide consultancy to your organisation to meet the requirements of the E.U. AI Act, using best practices, in addition to undertaking gap analysis and AI auditing, ensuring that your AI risk and compliance activities cover:

AI Risk Assessment & Business Impact Analysis

• Define your organisation’s AI definitions, categories, and their associated risks
• Identify the types of risks and harms posed by your entity-specific use of AI
• Apply responsible AI principles to your operations
• Implement key requirements where high-risk AI is being utilised
• Audit your organisation’s use of AI to ISO42001 certification requirements

Develop & Implement Governance Frameworks

• Define the roles and responsibilities for AI governance stakeholders
• Establish cross-functional collaboration in your AI governance program
• Define & create the communications plan for your organisation’s AI governance
• Create your organisation’s compliance enforcement frameworks
• Determine the mode of managing third-party AI risks

Create entity-specific policies and procedures to apply throughout your AI life cycle

• Develop and implement policies to ensure oversight and accountability across all AI life cycle stages
• Define the required
  • data acquisition and use
  • risk management & integration of existing security
  • model development
  • testing & deployment
  • monitoring procedures
  • AI awareness training
  • reporting & incident management procedures
  • compliance documentation

Legal Framework Understanding

• Review and communicate the legal domains affecting your organisation’s AI use
• Address AI data privacy issues
• Identify relevant AI intellectual property, anti-discrimination, consumer protection, and product liability laws.
• Develop appropriate documentation for AI legal compliance
• Define the key AI privacy requirements & create relevant policies, procedures 

How We Do It

AI governance, risk and compliance requires a unique skill set from an external consultant due to the emergent nature of AI continuing developments, with these being:

• AI & M-L knowledge
• Technical knowledge of IT
• Cyber security knowledge & experience
• Risk management experience
• Legal & regulatory knowledge
• Auditing skills & experience
• Controls development & implementation
• Waterfall & Agile project management expertise

We have over 25 years of experience in developing software, IT & data privacy auditing, creating & implementing security & compliance frameworks, policies & procedures on an international basis, across multiple sectors; both commercial & governmental.

Our Framework Methods

We utilise established frameworks and standards, including those from NIST, ISO, ICO, SCF, CIS & the CSA, to ensure all generally accepted best practice is embedded within your organisation’s AI risk & compliance programs. 

AI Process

a) We undertake an initial discussion with you as our client to define the scope of work & identify your priorities.

During the initial scoping exercise, we will define, in conjunction with you, the required KPI’s, KRI’s & KGI’s (key goal indicators).

b) A Statement of Works is created for your review, which has in-built flexibility, through the use of both DSDM Agile and Prince 2 project management methods, to allow for changing needs during the initial assessment period.

c) At the conclusion of the initial phase, we will provide you with a risk-based report, which will conclude the Review Stage & includes the analysis of the strategic alignment of the AI system, whether implemented or proposed.

d) After review of the report, we will co-determine selected areas with the highest priority, to meet the risk appetite of your organisation, with a follow-on audit of your organisation’s use of AI, to ISO42001 + ISO27001 + GDPR standards being undertaken.

e) Our audit report will enable you to determine the priority domains that may require either a mitigation control, a re-evaluation of your use of AI systems, a change of AI metrics, a review of the initial AI business case, or another follow-on action.

Our objective is to facilitate optimisation of AI within your organisation, with business objective alignment, appropriate AI & data privacy risk mitigation controls, whilst complying with current & future AI & data protection laws.

CONSULTANCY DAY RATE COSTS (€)

DAY RATES €	AI CONSULTANT	LEAD CONSULTANT
On-Site	€1300 + Travel Costs	€1500 + Travel Costs
Remote Only (min 3 days)	€900	€1100
Hybrid	€1100 – Travel Costs	€1300 – Travel Costs

For more information on our AI and data protection services please contact us https://quantar.tech/contact-us/