Governance Works is a right-fit consultancy for AI governance, IT security and strategy. It helps boards and executives put practical controls in place, sized to the risk actually in front of them.
The premise is simple: governance should speed you up, not slow you down. Most organisations experience it as the opposite, and that is usually a sign it was sized for someone else.
Right-fit, and I will say so. If you need less than you asked for, you will hear that. If the problem is not one I should be solving, you will hear that too.
Built to be handed over. Everything I build is meant to be run by your people. A management system that only works while a consultant is in the room is not a management system. The best systems are built in cooperation with those that will take over once I leave. Handover is easy and complete, and I’m available if the odd question pops up, but that’s not usually necessary.
Plain English. Board papers, policies and assessments that people read and act on. No acronym soup.
Honest about limits. Every engagement has a boundary. Naming it up front is more useful than discovering it later.
Mid-sized organisations that have outgrown informal governance but do not have a dedicated function. Contracted providers with accreditation obligations. Boards who have realised AI is now their problem.
Larger organisations with dedicated teams who need additional guidance on specialised subjects.
Organisations with a temporary gap in capability or in need of a temporary specialist.
ISO 42001
ISO27001
RFFR