AI system owners
Teams responsible for an AI system, its lifecycle and the evidence available to explain its operation.
NIST AI RMF / evidence-led readiness
NIST AI RMF only — a scoped reviewable operating picture.
A scoped service for teams using the NIST AI RMF as a reference to organise governance, map evidence and decide what needs deeper examination.
What we examine
Start a NIST AI RMF pre-assessmentRequest a NIST AI RMF audit
Commercial terms · NIST AI RMF only
USD 750 per month
Month-to-month renewal. You may choose not to renew the following month.
Request the NIST AI RMF only pathWho this is for
Risk and governance leads
People who need a common vocabulary for risk questions, controls, evidence and open decisions.
Questions this addresses
A fragmented risk picture
Govern, Map, Measure and Manage activities are distributed across teams, records and operating locations.
Unclear evidence priorities
The organisation needs to distinguish available evidence, missing material and questions that require specialist interpretation.
What we examine
Selected RMF functions
The assignment maps the NIST AI RMF functions and categories selected for the system, use case and evidence question.
Operating dependencies
Relevant providers, data flows, human roles, controls and jurisdictions are recorded as part of the agreed perimeter.
What you receive
RMF evidence map
A readable map of selected functions, evidence sources, owners and open questions.
Decision brief
A bounded summary of observations, limitations and next checks for the agreed system and operating context.
What success looks like
Shared risk model
Owners can explain which RMF questions are in scope, what evidence supports them and where uncertainty remains.
Prioritised next step
The team has a proportionate sequence for further evidence, control work or qualified advice.
Cross-border perimeter
Operating footprint
Teams, providers, users and evidence locations across borders are listed rather than treated as interchangeable.
Local questions remain visible
Language, records, roles and jurisdiction-specific questions are separated from common control themes.
Limits and dependencies
Reference, not a legal conclusion
The NIST AI RMF is used as an organising reference in the assignment; the work does not determine legal applicability.
Evidence is time-bound
Findings depend on the system, records, people and evidence date agreed for the review.
Engagement levels
Readiness review
A first, bounded review of roles, evidence and open questions. It identifies what to clarify; it is not assurance, an audit or a certification.
Assurance
An evidence-led conclusion for the agreed scope, evidence date and criteria. It does not create a universal compliance conclusion.
Audit
A more formal examination of agreed criteria, records and controls. The audit scope, method and reporting basis are set in the engagement letter.
Certification
Certification is a separate route performed by an appropriate certification body. This service does not issue a certificate or replace that body’s process.
Scope note
This is a scoped review against selected NIST AI RMF questions. It is not a certification, regulatory approval, legal opinion or conclusion beyond the agreed evidence and jurisdictions.
Official contacts
Maison Sasson ltd - United Kingdom