AI readiness & policy
Your staff are already using AI. The question is whether you know about it.
Where is AI already being used in your business? (Hint: your staff are already pasting things into ChatGPT.) What is safe, what is not, and what is the rule? We assess, write the plain-English AI policy, and get your data house in order.
Three ways AI goes wrong
None of these show up in a security report, because technically nothing was hacked.
Shadow AI
Staff using free consumer AI tools on personal logins. Your client information goes somewhere you cannot see, cannot audit and cannot get back.
Over-sharing
AI respects your existing permissions exactly – which means it exposes every permission mistake you have ever made, the moment somebody asks the right question.
No rules
Nobody has told the team what is OK. Can they put a client’s financials in? A staff member’s medical note? Most people are not reckless – they just have not been told.
What a readiness review covers
What is actually being used
We check which AI tools your staff are already signing into with their work accounts. There is usually a surprise or two.
Whether your data is ready
AI can only answer from what it can see. If your files are spread across a server, three OneDrives and someone’s desktop, you will get rubbish answers.
Where the permissions are loose
The over-shared folders, the stale guest accounts and the links that were meant to be temporary. We find them before AI does.
What is worth doing
A short list: do this now, do this next, do not bother with this yet. Including “nothing, not yet” if that is the honest answer.
The policy, in plain English
A one-page AI policy people will actually read, not a twelve-page document that lives in a folder nobody opens. We draft it for you.
It covers what tools are approved, what information must never go into them, when a human has to check the output, and who to ask when something is not clear.
If you are going through cyber insurance renewal or a client security questionnaire, “how do you govern AI use?” is now on the list. Better to have an answer.