1. Frame the decision
Replace a broad request such as “help with AI governance” with a concrete outcome: approve a release gate, establish an evaluation program, prepare for customer diligence, or remediate a known control gap.
Practice note 01
For AI governance, evaluation, safety, and readiness engagements.
A practical advisory framework for converting client facts into an AI readiness assessment, prioritized risks, concrete deliverables, decision owners, and a proposal that shows its working.
Discovery record
What business or release decision must this engagement enable?
Which models, prompts, data sources, tools, users, and environments are in scope?
What can go wrong, who is affected, and which outcomes are unacceptable?
What tests, policies, logs, incidents, evaluations, and approvals already exist?
Who owns product, risk, security, legal, data, and final release authority?
Which deadlines, regulations, integrations, budgets, and procurement rules shape delivery?
Replace a broad request such as “help with AI governance” with a concrete outcome: approve a release gate, establish an evaluation program, prepare for customer diligence, or remediate a known control gap.
Inventory the actual workflow and evidence. Distinguish documented controls from controls that operate in production, and distinguish planned tests from results that a reviewer can inspect.
Rank risks by consequence, likelihood, exposure, detectability, and reversibility. Link each priority to a client fact instead of using a generic maturity checklist as the conclusion.
Describe artifacts and decisions, not vague activities. Examples include an evaluation plan, risk register, release gate, red-team pack, evidence map, incident playbook, or reviewer handoff.
List the access, data, experts, approvals, and decisions the client must provide. Dependencies and exclusions belong in the scope before commercial approval.
Give every deliverable an acceptance criterion, reviewer, due date, and evidence format. A workshop is complete when it produces an agreed decision or artifact, not when the meeting ends.
Proposal quality gate
Preserve the chain from client fact to risk, from risk to deliverable, and from deliverable to acceptance decision. Make exclusions, dependencies, open questions, client responsibilities, and change-control rules visible before signature.