Leadership
Board AI Risk Briefing & Director Training
Directors are being asked to oversee AI risk without a shared vocabulary for it. We brief boards and train directors to separate three different problems — AI as a threat, AI to govern and AI you use — and to challenge management with confidence.
The challenge
“AI security” is three problems. Most boards are discussing one.
Board papers increasingly carry an “AI” item, and it often blends three quite different things: attackers using AI against you, the organisation adopting AI and agents, and the security function using AI itself. Each has different owners, different risks and different questions.
Our principal has presented original research on AI security and post-quantum readiness to Tier 1 financial institution leadership teams, and has delivered executive and practitioner training across identity, privileged access, GRC, AI security and post-quantum readiness.
Sessions are candid, practical and free of vendor agendas. Directors leave knowing what to ask, what good looks like and what they should expect to see reported.
What you get
Outcomes, not reports.
- 01
A shared vocabulary
Directors can distinguish AI-enabled threats, the governance of AI adoption and the use of AI inside the business.
- 02
Better questions
A practical set of questions to put to management on agents, identity, data and accountability.
- 03
Clear accountabilities
Clarity on the board’s role, management’s role and how AI risk should be reported upwards.
- 04
Confidence under scrutiny
Directors better prepared for questions from regulators, investors and customers.
How we work
Senior-led from scoping to sign-off.
-
Understand
A short pre-briefing conversation with the chair or committee chair to understand priorities and current AI adoption.
-
Tailor
Content built around your sector, your regulators and your actual AI plans — not generic slides.
-
Deliver
An interactive session led by a senior practitioner, with scenarios drawn from real-world incident patterns.
-
Follow up
A concise note of key questions, recommended reporting metrics and next steps.
Deliverables
- Tailored board briefing or workshop
- Director question set on AI and agent risk
- Recommended board reporting metrics
- Optional training programme for executives and practitioners
Who it’s for
- Boards and board risk or audit committees
- Non-executive directors with oversight of technology, risk or audit
- Executive committees preparing to take AI proposals to the board
- Security and risk teams building board-level AI literacy
Aligned to
- UK Cyber Governance Code of Practice
- EU AI Act
- ISO/IEC 42001
- NCSC Cyber Security Toolkit for Boards
Questions
Frequently asked.
Can you cover quantum risk in the same session?
Yes. Many boards combine AI and post-quantum readiness in one session, as both require long-horizon investment decisions.
Do you offer training beyond the board?
Yes. We deliver executive and practitioner training across AI security, identity and privileged access, GRC and post-quantum readiness, built from what we actually deliver.
Often paired with
vCISO for AI
A senior CISO on a retained basis, accountable to your board — with AI and agent risk built in from day one.
Explore vCISO for AIAI-Incident Tabletop Exercises
Executive and operational exercises built around a rogue or compromised agent. Find the gaps before an incident — or a regulator — does.
Explore AI-Incident Tabletop ExercisesAI Governance, ISO/IEC 42001 & EU AI Act Readiness
An AI management system your auditors, regulators and board can follow, mapped to ISO/IEC 42001 and the EU AI Act.
Explore AI Governance, ISO/IEC 42001 & EU AI Act ReadinessStart with a confidential conversation.
A confidential conversation about Board AI Risk Briefing & Director Training with the senior practitioner who would lead the work. No sales team, no obligation.