AI readiness & training
Know where you stand. Ensure your people are ready.
With the EU AI Act now active, enterprises are operating in a compliance vacuum.
The EU AI Act is now active and applying in phases, with transparency obligations from August 2026 and high-risk system requirements following from December 2027. However, the EU AI Act is only part of the picture. The UK, US, South Korea, and other jurisdictions are moving fast with their own frameworks, and understanding how the full regulatory landscape applies to your specific business, products, and AI use cases is where the real work sits.
Our CEO has direct experience of the development of AI regulatory frameworks, including early engagement with the European Commission. Our programmes draw on that, combined with deep AI compliance expertise across legal, compliance, technology, data science, digital marketing, and HR.
Knowing about the EU AI Act and being ready for it are two different things.
Most organisations have done some scoping. What they rarely have is an honest picture of where their AI systems sit, what controls are required, and a practical plan to reach MDP (Minimum Defensible Position) and beyond. On training, general awareness isn't enough - the Act requires role-specific AI literacy, and what that means for a data scientist is very different from what it means for an HR manager.
How it works
Two connected parts - a readiness assessment and a training programme. Commission together or independently. Where assessment comes first, training is more targeted, built around what the assessment reveals rather than a generic curriculum.
Our work follows the same Diagnose · Design · Deliver · Defend methodology we apply across all engagements - assessing where you are, designing the right response, supporting implementation, and ensuring your position holds up over time as regulation and your AI use evolve.
Readiness assessment
Covering AI system classification, governance and control requirements, documentation needs, and your position under the EU AI Act and broader AI regulatory frameworks - including how requirements apply specifically to your business model, products, and AI use cases:
| Tier | What it involves | Delivered as |
|---|---|---|
| Snapshot | Rapid review of AI inventories, governance frameworks, and policies. Initial picture of where you sit and what to prioritise. | Written findings summary with prioritised recommendations. |
| Assessment | Document review plus structured interviews. How requirements apply to your AI use cases and a plan to reach Minimum Defensible Position. | Written report with findings and prioritised remediation plan, presented to leadership. |
| Extended review | Broader scope across AI systems, data governance, and privacy - including KYAI mapping. For complex environments or urgent regulatory pressure. Can be mobilised quickly. | Detailed findings report with remediation priorities, presented to leadership. |
| Deep dive | Comprehensive review across AI systems, governance, data quality, and regulatory exposure - including full KYD and KYAI assessment. For organisations preparing for a regulatory moment or transaction. | Comprehensive report with findings, risk assessment, and remediation roadmap, presented to leadership. |
In addition to the above, we can supply our templates, and offer delivery leadership - to help you reach your destination more quickly.
Training
Aligned with EU AI Act Article 4 AI literacy requirements, and tailored directly to your organisation's sector, risk profile and specific AI use cases. Delivered remotely or in person.
| Audience | Focus |
|---|---|
| All staff | What AI is, how it's used in the organisation, and responsible use in practice - aligned with EU AI Act Article 4 literacy obligations. |
| Legal and compliance | EU AI Act obligations, risk classification, documentation requirements, and how AI intersects with existing legal and regulatory frameworks including GDPR and the Data (Use and Access) Act 2025. |
| Technology | Model governance, explainability, bias testing, human oversight mechanisms, and technical controls for high-risk AI systems, including responsible AI integration into digital transformation programmes. |
| Data science and CDAO | AI lifecycle governance, training data controls and provenance, data lake and gold tier data risks, masking and anonymisation, and our paired KYD (Know Your Data) and KYAI (Know Your AI) methodologies applied to AI model development. |
| Digital marketing | Consent and personalisation risks, automated decisioning and segmentation, and profiling obligations under GDPR and the EU AI Act. |
| HR | AI in recruitment, performance management, and workforce planning - bias and fairness obligations, human oversight requirements, and employment law implications. |
All modules can be tailored to the specific organisation, its sector, and its AI use cases.
Getting AI governance and training right isn't a compliance exercise. It's how your people use AI well without causing unintended harm, how you build trust with customers and investors, and how AI becomes a growth driver rather than a regulatory overhead.