What is the risk?

Many organisations now have an AI policy. Few know for certain what their people are doing with AI, which tools they use, what data goes into them, and why capable staff work around the rules they’ve been given.

This creates risk: confidential data in public tools, hallucinated content reaching clients, human checks that have become a formality, and uneasy staff stalling adoption. Policy and technical controls alone are insufficient.

Unless people understand and apply your policies, your organisation is exposed to financial, operational and reputational risk.

• Surface risk. The approach comes from intelligence work: confidential, structured, and focused on what people do rather than what the paperwork says.
• Change behaviours, not tick boxes. Training is about judgement and oversight, not tool onboarding or prompt writing.
• Proportionate. Advice fits your size, your sector and the risk you carry.

Who I help

I help organisations that can’t afford to get AI wrong: those handling personal and regulated data, delivering government and defence contracts, running critical infrastructure, or trusted with their clients’ confidential information.

It’s usually the right time to talk when:

• you’re rolling out AI tools and want your people to adopt them with confidence, not resist them or work around them
• your people are using AI tools, approved or not, and you can’t say with confidence how
• you’ve written an AI policy and need to know whether it’s followed
• AI-generated work is going out that reads well but says little, or gets it wrong
• you rely on human-in-the-loop checks and aren’t sure they would stand up to scrutiny
• you are concerned with how threat actors are using the technology, and what this means for your security
• clients, regulators or the board are asking questions you can’t yet answer.

Not on the list? If it involves AI and your people, it’s worth a conversation.