Security advice.
Carried through.
Practical advice and implementation for AI governance, information security and customer assurance.
Explore servicesAI Systems Management
Decide where AI can help, what company information it can use and which decisions need a person.
What happens to a new AI tool?
- New AI tool
- Agree its purpose and owner
- Check risks, data and limits
- Test before everyday use
- Approve and use Review, improve or retire
- Reject the tool Remove access and check stored data
- Trial goes quiet Unused, still connected
- 80%
- of respondents said their CEO had directed an AI transformation.
- 77%
- of surveyed organisations said AI adoption had moved faster than their ability to oversee it.
- 2 in 3
- surveyed CIOs and CTOs said they were responsible for AI systems they could not fully control.
- 11%
- of respondents felt fully prepared for the following year's expected scale of AI-agent deployment.
Self-reported IBM/Oxford Economics survey: 2,000 senior executives responsible for IT, technology or AI decisions across 33 geographies and 19 industries, January–April 2026. Published 8 June 2026.
IBM surveyInformation Security
Identify security gaps and carry out agreed policy and technical improvements, with clear ownership of the controls.
How do you keep business information protected?
- Know what needs protecting
- Understand risks and name owners
- Put protections in place
- Check they work
- Working as intended Keep evidence and review
- Changes needed Agree fixes and check again
- Action left undone Risk remains open
- 43%
- of UK businesses identified a cyber breach or attack in the previous 12 months.
- 30%
- of UK businesses assessed their cyber security risks in the previous 12 months.
- 36%
- of UK businesses had formal policies covering cyber security risks.
- 25%
- of UK businesses had a formal plan for responding to cyber incidents.
UK Government Cyber Security Breaches Survey 2025/2026. Weighted, self-reported findings from 2,112 UK businesses; fieldwork August–December 2025. Published 30 April 2026.
UK Government surveyAssurance Readiness
Prepare for a customer questionnaire, tender or assessment with an evidence review and a focused plan for the gaps.
From a customer request to a clear answer
- Customer asks for proof
- Agree what they need
- Check existing evidence
- Find what is missing
- Evidence ready to share Customer or assessor decides
- Gaps to close Agree actions and owners
- Requirement changes Review scope before committing
- 77%
- of surveyed businesses reported demands for verified proof of compliance.
- 61%
- of respondents said proving security took more time than improving it.
- ≈10 hrs
- per week on compliance tasks, including policy reviews and collecting evidence.
- 7 hrs
- average weekly time spent reviewing supplier security and risk.
Vanta State of Trust 2025. Self-reported findings and time estimates from research by Sapio Research in July 2025. Report sample: 2,500 business and IT leaders in the US, UK and Australia. Published 29 October 2025.
Vanta report (PDF)- Discover
- Agree scope
- Deliver
- Hand over
Practical questions.
How do I get started?
Book an introductory call or email your enquiry. Bring your main concern, any customer requirement and a relevant deadline.
How are fees and timescales agreed?
Scope, fees and timing are agreed before work begins, based on the work needed and access to people and evidence.
Do I need certification?
Not necessarily. The Advisory can help without certification. If your requirements call for it, preparation can be included in the agreed scope. An independent certification body or scheme assessor makes the decision; no result is guaranteed.
Discuss your requirements.
An introductory call to discuss your goals, timing and whether the Advisory can help.