Map shadow AI. Put AI-scoped controls in writing.

List USD $4,000 · Remote · Control hygiene before agents

Map shadow AI. Put AI-scoped controls in writing.

Remote Microsoft Teams workshop + written AI & Control Readiness review. Control hygiene before agents. Not a strategy deck. Not a cyber certification.

Book a 20–25 min discovery See what you get ↓

What it is

US SMB teams already have ChatGPT, Copilot, and other AI tools in pockets — often without a shared inventory or written rules. IT and MSP work usually covers endpoints and tenants, not AI-scoped tool and data controls.

AI & Control Readiness is a fixed-scope engagement that gives you a written, point-in-time map of how AI is used (including shadow AI), which AI-scoped controls exist or are missing, and a 30 / 60 / 90 action list — workshopped live.

What you get

  • 1. Workshop (90–120 min, Microsoft Teams)

    Consent and point-in-time caveat; AI use and shadow AI inventory; AI-scoped control checklist; live read-back of what will appear in the draft. Share docs and screenshots in meeting chat only. No install and no tenant admin connectors in v1.

  • 2. Written AI & Control Readiness Review (PDF)

    Executive summary; AI inventory (approved / shadow / unknown); control status table (Present / Partial / Missing / Not provided) for the six controls below; priority matrix and 30 / 60 / 90 actions; mandatory point-in-time caveat.

  • 3. Findings workshop (45–60 min)

    Walk the written review; decisions documented.

  • 4. MSP coexistence

    Sits beside your MSP / IT, not instead of them.

Typical calendar: about 10–14 days from signed SOW. List price: USD $4,000.

The six AI-scoped controls (BoK)

  • OAuth / app consents

    OAuth / app consents for AI tools

  • Data classes

    What may go into which tools

  • Admin MFA

    Admin MFA on AI consoles

  • Human approval gates

    Before sensitive / external actions

  • Logging / retention

    For AI use (practical)

  • Kill switch / disable path

    For agents and automations

What it is not

  • Not a strategy deck

    A generic AI strategy deck or slide-only workshop

  • Not a cyber cert

    A cyber certification, SOC 2, or Essential Eight audit

  • Not monitoring / legal / insurance

    Continuous monitoring, remediation labour, legal advice, or insurance outcome promises

  • Not tenant admin access

    Live Graph / tenant admin access

  • Not MSP / SOC replacement

    MSP or SOC replacement

  • Not an agent build

    A production agent build (that is a separate Production Agent Sprint)

  • Not managed agent ops entry

    Ongoing managed agent ops (only after agents exist)

How we frame the controls

New Gauge Digital’s AI & Control Readiness review uses a fixed set of AI-scoped operating controls (tool consents, data rules, admin MFA on AI consoles, human approval gates, practical logging/retention, and a kill/disable path for automations). These themes are consistent with conserved industry practice and with ideas that recur in public guidance such as the NIST AI Risk Management Framework (Govern/Map/Measure/Manage), ISO/IEC 42001-style AI management expectations, and OWASP’s work on LLM application risks (especially sensitive data exposure and excessive agency). This engagement is a point-in-time readiness assessment, not a certification or conformity audit against those frameworks.

Offer ladder

  • Now — A

    AI & Control Readiness (this page)

  • Next — C

    Production Agent Sprint — one production agent when a workflow is named

  • Later

    Managed agent ops only after agents exist

Soft B (systems / process work) is not the US cold lead. Do not sell D as the entry.

Who it’s for

  • US SMB size

    US employers roughly 10–249 people (or serious 15–40 professional services)

  • Sectors

    Professional services, consultancy / agency, accounting / advisory, ops-heavy B2B

  • Buyers

    Owners, partners, COO / G&O, Dir IT who want written controls, not a deck

  • Scheduling

    Can meet during Eastern Time (Chattanooga, TN) business hours.

Est. 2011 · Remote delivery · Brisbane-based founder

We coordinate with your MSP — we don’t replace them

Book a 20–25 min discovery

Eastern Time (Chattanooga, TN). We’ll confirm fit before any SOW. List price USD $4,000.

Book a 20–25 min discovery See what you get ↓