Don't let Shadow AI invade your business. Install our Shadow AI browser extension in your organization. Learn more →
IM Implementation
Services · Step two

Build only what your audit says you need.

Implementation turns your audit results into a working governance capability. Every finding in the audit maps to exactly one implementation step, so your roadmap decides the scope: some organizations need all of them, others need two or three. The steps are sequenced by risk and delivered on the Governance 1st platform.

From audit to action

Your findings
set the scope.

We don't sell a fixed package. The audit's risk weighting pulls urgent items forward and lets others wait. A one-level gap in a high-risk area outranks a two-level gap in a low-risk one. Already have an audit from someone else? We can work from that too.

P1

Stabilize · 0–3 months

Contain every critical finding. Appoint an accountable owner and an interim committee. Put a fit-for-purpose policy in front of the workforce. Gain point-of-use visibility.

P2

Build · 3–9 months

Complete the AI inventory and stand up the risk process. Implement risk-tiered controls. Turn compliance obligations into evidence. Build workforce capability and trust.

P3

Operate & Optimize · 9–18 months

Monitor AI use and outputs, embed governance metrics, and re-run the audit to confirm gaps are closed. Governance becomes a standing capability, not a project.

The steps

Take the full program,
or just the steps you need.

Each step closes one area the audit measures. Take them together as the full program, or individually as your roadmap calls for them. Re-running the audit afterward shows exactly what changed.

IP

Governance Implementation Program

The end-to-end build: every step below, across three phases, sequenced by your audit's risk weighting.

Explore the full program →

FS

Foundation Setup

The accountable owner, chartered committee, decision rights, and operating cadence that every other step depends on.

Explore →

PI

Policy Implementation

Deploy a fit-for-purpose AI policy suite and supporting standards, with attestation and reinforcement.

Explore →

UV

Use Visibility & Inventory

Point-of-use visibility plus a living AI inventory with classification and an intake path for new use.

Explore →

RC

Risk & Controls

A working risk register and assessment process, plus proportionate controls: human review, guardrails, filters, vendor terms, and logging.

Explore →

CI

Compliance Implementation

Turn mapped obligations into operating controls, with built-in evidence, record-keeping, and transparency.

Explore →

WE

Workforce Enablement & Change

Role-based capability building plus the trust, communication, and change management that sustain adoption.

Explore →

LD

Leadership Development

Develop leaders against the six AI-leadership dimensions. Pairs naturally with the Leadership 360 but runs on its own.

Explore →

MC

Monitoring & Continuous Improvement

Ongoing monitoring of AI use and outputs with the ten behavior evaluators, governance metrics, and periodic re-assessment.

Explore →

How it maps

If the audit finds this,
you need that.

A few common examples of how audit findings point to implementation steps.

Start with the Audit →
Next step

Move from audit to
operating capability.

A scoping conversation about your audit findings (yours or ours), the steps in play, and a realistic phased plan to close the gaps that matter.

✓ Scoped by your audit findings
✓ Sequenced by risk
✓ Delivered on Governance 1st
✓ Re-audit to confirm gaps closed