Practice
Three things we do.
We tell leaders what's really going on and what to do about it. Two practices and a research group, working at the top of the pyramid.
- 01
Risk advisory
For boards, executives and governments
Where you really stand, what it could cost, and what to do next. Written for the people who decide.
A map of your risk surface: security, AI, the rules you answer to in every country you operate in, and the pressure coming at you from outside. Then a roadmap, in the order it should happen.
- A state analysis the board can read in one sitting
- Your risk surface, mapped, with what each exposure would cost
- A roadmap with owners, order and proof points
- A standing advisor the board can call before deciding
- 02
AI safety
For organizations adopting or building AI
Before AI is everywhere in your business, we test it. You find out what it does under pressure, not what the vendor promised.
For organizations rolling AI out across the business, and for teams building their own models and agents. Evaluation harnesses, simulations and red-teaming, the checks the big AI labs run before every release, applied to your systems before they're trusted.
- A list of your AI systems and what each is allowed to do
- A red-team report with every finding reproduced
- An evaluation harness your team keeps running
- Release criteria your leaders sign, and a safety summary you can show regulators and investors
- 03
Research
Behind both practices
We watch the ground under the other two: what's moving, who's moving it, and what it means for you. Most of it isn't published. Some is.
A small group whose job is to know what’s coming before it arrives. It keeps the advisory and AI safety work honest, and it keeps its own counsel. What we can publish, we do.
How we work
We work at the top of the pyramid.
Every organization runs on three levels. Most consultancies sell all three and are honest about none. We do the top, help with the middle, and name who does the rest.
- 01
Decide
Where we work
Where are we, and where should we go? State analysis, risk surfaces, roadmaps. The judgement a board or a minister needs before committing money and people.
Us
- 02
Deliver
Where we help
How do we get there predictably? Program and project oversight, the order of operations, and an honest read on whether the plan is working.
Us, with your team
- 03
Build
Where we don’t
Engineers, developers and creatives making the fixes real. We don’t do it, and we don’t pretend to. Our sister company, Graphite & Moss, does.
Graphite & Moss
How we engage
Three ways to work with us.
- One-off
State analysis
- An independent read of where you really stand, with the evidence, and what we'd do first. For a board, an audit committee, an investor, or a leadership team that wants the truth before the plan. Usually four to eight weeks.
- Program
Roadmap and oversight
- The order of operations, who owns each step, and a standing check on whether it's working. We don't build the fixes; we make sure the people who do are building the right ones. Hands-on engineering goes to our sister company, Graphite & Moss (graphiteandmoss.ca).
- Ongoing
Standing advisor
- The board's second opinion, month to month. A regular plain read on what has changed, a call before big decisions, and someone who picks up the phone when something goes wrong. Some clients call this a virtual CISO.
Start here
Not sure where you stand? Let's find out.
Tell us what the board is asking, what the regulator wants, or what's hitting your service. Or just the feeling that the green dashboard isn't telling you everything. We'll tell you plainly what we'd look at first.
We’ll reply in writing: what we’d look at first, and a quote.
