AI Governance & Readiness Review
The problem this service solves
AI governance is no longer simply a future consideration or an optional improvement. The EU AI Act entered into force on 1 August 2024 and is applying in phases, with broad application from 2 August 2026 and some obligations already in effect. Organisations that provide, deploy or use AI in ways that fall within scope need to understand their responsibilities, evidence key decisions and put proportionate controls in place. Failure to do so can lead to regulatory scrutiny, corrective action, operational disruption and potentially significant financial penalties.
The AI Governance & Readiness Review helps a small or medium business or contained team understand its current position and identify what needs to change. P5X applies a practical governance assessment informed by the EU AI Act and the NIST AI Risk Management Framework to the declared AI activity, available evidence, ownership arrangements and working practices in scope. The result is a structured report and 90-day readiness strategy showing material gaps, recommended controls, accountable owners and priority actions. It supports informed management decisions but does not provide legal advice, a formal compliance conclusion, independent assurance or regulatory certification.
Who it is for
- Small and medium businesses preparing for wider or more structured AI adoption
- Organisations that may fall within the EU AI Act because they provide, deploy or use AI in or affecting the EU
- Contained teams that need clearer ownership, approval routes and practical controls
- Leaders who need a framework-aligned readiness plan rather than legal assurance or certification
- Organisations with declared AI tools or use cases but limited visibility of how they are governed
- Decision-makers seeking a practical 90-day governance foundation rather than a corporate-wide operating model
What is included
- Structured kick-off to confirm the objectives, boundaries, stakeholders, evidence and declared AI activity in scope
- Stakeholder interviews and review of selected declared AI tools or use cases
- EU AI Act-informed readiness assessment covering relevant responsibilities, evidence and governance expectations
- NIST AI Risk Management Framework-informed review across governance, mapping, measurement and management themes
- Assessment of leadership accountability, ownership, decision rights, approvals and escalation routes
- Review of confidentiality, data handling, verification, human oversight and appropriate-use expectations
- Identification of maturity gaps, capability needs and priority control actions
- Management playback to test the findings, clarify responsibilities and agree the priorities for a 90-day readiness strategy
What you receive
- AI Governance & Readiness Report
- EU AI Act- and NIST AI RMF-aligned readiness assessment
- Scoped inventory of the declared AI tools and use cases reviewed
- Governance and readiness maturity profile
- Prioritised gaps, implications and management considerations
- Practical risk and controls register
- Ownership and decision-rights matrix
- 90-day governance and readiness strategy
Pricing
- From £2,950
Pricing is affected by the number of stakeholders, declared tools or use cases, the breadth and quality of the available evidence and the depth of the required management outputs. The final fee may increase where the review requires wider stakeholder coverage, additional evidence analysis, more complex ownership arrangements or a more detailed controls register and readiness strategy.
This service is informed by recognised governance principles and frameworks, including the EU AI Act and NIST AI Risk Management Framework. It does not provide legal advice, compliance conclusions, certification or assurance.
Confirm the right scope before work begins.
Your discovery call confirms fit, deliverables, boundaries, timeline and the final fixed fee.