Build Trust and
Unlock Strategic Advantage
Audits are no longer just about checking boxes. They’re about building trust, identifying blind spots, and creating value. We go beyond surface-level reviews to provide deep insights into the integrity, security, and governance of your technology. We deliver expert-led, standards-based audits across AI, privacy, cybersecurity, and digital platform accountability.
In today’s fast-moving digital environment, audits are no longer just about checking boxes, they’re about building trust, identifying blind spots, and unlocking strategic advantage.
At Assessed Intelligence, our audits are designed to go beyond surface-level reviews. We assess the integrity, security, and governance of your technology, including AI, algorithms, infrastructure, and processes, through a multidisciplinary lens. Our approach blends regulatory precision, technical depth, and ethical foresight to deliver audits that prepare your organization for real-world scrutiny and future resilience.
Verify Compliance
Align with global regulations and standards like ISO 42001, NIST AI RMF, SOC 2, GDPR, and the EU AI Act.
Reduce Risk
Identify security, ethical, and operational risks before they escalate.
Build Trust
Enhance internal governance and demonstrate assurance to stakeholders, regulators, and customers.
Improve Performance
Gain actionable insights that drive process improvement and responsible innovation.
Our Rigorous Audit Process
We align our engagements with ISO and AICPA standards, upholding independence, objectivity, and professional skepticism to ensure rigor and consistency.
Engagement Planning & Kickoff
We define the audit scope, understand your risk landscape, and tailor the audit plan to your systems and objectives.
Fieldwork & Evidence Collevtion
Using structured methods, we examine processes, artifacts, configurations, documentation, and systems to evaluate controls and governance maturity.
Draft Reporting & Recommendations
Clear, actionable reports are delivered to your leadership team, summarizing findings, control gaps, maturity levels, and prioritized recommendations.
Final Reporting
We deliever the final report offer guidance, and re-assessment options post-audit to support continuous improvement, risk remediation, and audit-readiness for regulators or certifiers.
Example Project Workflows
See how our structured approach delivers tangible results. Here are examples of how we partner with clients to achieve their compliance and maturity goals.
ISO 42001 Certification Audit
Objective: Achieve formal certification for your AI Management System (AIMS).
Kick Off
We define the audit scope, understand your risk landscape, and tailor the audit plan clearly identifying which AI systems, business units, or products are covered by the AIMS.
Phase 1
Stage 1 Audit (Documentation & Readiness Review)
We conduct a formal review of your AIMS documentation against the standard’s requirements to ensure all necessary policies, objectives, and controls are defined and in place.
Phase 2
Stage 2 Audit (Implementation & Effectiveness)
Our auditors perform fieldwork, gather evidence, and conduct interviews to verify that your AIMS is fully implemented and operating effectively as designed across the organization.
Phase 3
Reporting, Certification & Surveillance
We deliver the final audit report and, upon successful review, issue the certification. We then establish a surveillance audit schedule to ensure ongoing compliance.
Custom Cybersecurity Maturity Assessment
Objective: Evaluate program maturity against a hybrid framework (e.g., NIST CSF & ISO 27001).
Kick Off
We define the audit scope, understand your risk landscape, and tailor the audit plan clearly identifying which AI systems, business units, or products are covered by the AIMS.
Phase 1
Framework Tailoring & Discovery
Understand business context, customize the assessment framework, and identify key stakeholders for interviews.
Phase 2
Multi-Domain Capability Assessment
Conduct interviews, review technical artifacts, and score each control against a defined maturity model.
Phase 3
Strategic Reporting & Improvement Plan
Deliver a visual maturity dashboard, optional peer benchmarking, and a multi-year roadmap of strategic initiatives.
Our Audit Team Members
Alan McCay
AI & Cybersecurity Auditor
Chad Devore
Jr. Auditor
Debashree Bhattacharya
AI & Cybersecurity Auditor
Nia Richard
AI & Cybersecurity Auditor
Keith Parkman
Director of Audit
Laura Morgan
Chief Ethics Officer
Esther Chung
Chief Privacy & Risk Officer
Alan McCay
AI & Cybersecurity Auditor
Alan is a seasoned IT, Security and GRC Professional with over 25 years of experience. A certified CISSP, ForHumanity expert in AI Risk Management and AI Algorithmic Ethics as well as experience in GDPR and Privacy, he has led enterprise security and compliance transformations; implementing, ISO 27001, Soc 2, NIST (800-171), Cyber Essentials and emerging AI governance standards. He also has a consultancy background delivering bespoke I.T and Security solutions to private and third sector organizations spanning 15 years. He brings an emotional intelligent mindset to AI oversight from training in level 3 – Neurolinguistic programming.
- Group:Audit
Chad Devore
Jr. Auditor
Chad has spent over two decades within DOD and has 5 years of experience specifically working in the IT and Cybersecurity industry. His expertise spans supporting global DOD operations, Implementation of distributed IT and communication systems, industrial maintenance operations, and leadership. He offers a unique perspective to drive identification of risk and development of remediation strategies. His education is from Excelsior University in Cybersecurity, and he is working on completing his Master’s Degree in Cybersecurity.
- Group:Audit
Connect With Me:
Debashree Bhattacharya
AI & Cybersecurity Auditor
IDebashree is a cybersecurity and compliance expert with over 5 years of experience at the intersection of AI governance, data privacy, and risk management. A certified ISO/IEC 27001 and 42001 Lead Implementer and a CISA candidate, she has led enterprise initiatives across multinational and national banks, focusing on regulatory readiness, third-party risk, and control-based oversight. Her work bridges technical controls with regulatory frameworks such as GDPR, ISO/IEC 42001, and NIST, supporting responsible AI adoption and compliance across complex environments.
- Group:Audit
Connect With Me:
Nia Richard
AI & Cybersecurity Auditor
Nia is an accomplished leader with over 20 years of experience. As an ISO/IEC 42001 Practitioner, ISO/IEC 27001 implementer, and GRC Analyst, he has successfully implemented and integrated cybersecurity and compliance frameworks, aligning global standards like ISO/IEC 27001, ISO/IEC 42001, NIST, and HIPAA. His work has consistently focused on embedding risk management practices within modern IT solutions, enhancing organizational resilience, and fostering a culture of integrity and innovation.
- US
- Group:Audit, Research
Connect With Me:
Keith Parkman
Director of Audit
Keith is a seasoned IT and compliance professional with over 20 years of experience in information security, audit, and risk management. A certified CISA, CDPSE, and ISO Lead Auditor, he has led global implementations of standards such as ISO/IEC 27001, NIST, PCI DSS, and HIPAA. At Assessed Intelligence, Keith leads our IT audit and AI compliance efforts, including the implementation of ISO/IEC 42001. His work focuses on aligning emerging technologies with regulatory frameworks, driving ethical AI adoption, and strengthening organizational readiness across sectors.
- Group:Audit, Directors, Research
Connect With Me:
Laura Morgan
Chief Ethics Officer
Laura possesses a unique blend of expertise at the intersection of AI ethics, evidence-based practice, and philosophy. With a strong foundation in both academic and applied ethics, she has built a career focused on developing responsible AI frameworks and guiding organizations in navigating complex ethical and compliance challenges. As a ForHumanity Fellow in Ethics and Bias, she contributes to developing independent audit frameworks aligned with critical standards such as the EU AI Act, NIST, and ISO, with particular expertise in cognitive bias mitigation. As a professor of philosophy, she has taught courses across a range of philosophical domains, including applied ethics, moral philosophy, logic, and critical thinking. Her background in evidence-based medicine and applied ethics provides a unique approach to risk assessments and compliance guidance. Her focus is on translating complex ethical and technical concepts into actionable insights for responsible AI development and deployment.
- Group:Audit, Leadership, Research
Connect With Me:
Esther Chung
Chief Privacy & Risk Officer
Esther brings a rare blend of legal expertise, risk strategy, and deep commitment to ethical tech. As a former public interest attorney and current ForHumanity Fellow in Ethics and Governance, she’s spent her career focused on protecting rights and building accountability into complex systems. In her role as Chief Privacy and Risk Officer (CPRO), Esther will be instrumental in developing and executing Assessed Intelligence’s privacy program and overall risk management framework, enhancing our overall privacy, risk, and education initiatives. Her experience in directly engaging in AI risk evaluation, coupled with her proven ability to develop independent audit schemes aligned with global frameworks such as the GDPR and the EU AI Act, will be crucial in establishing and maintaining robust data protection practices, identifying and mitigating organizational risks, and ensuring our clients navigate the complexities of AI adoption with confidence and compliance, ensuring our clients navigate the complexities of AI adoption with confidence in a compliant manner. Esther will help lead efforts in embedding privacy by design and risk management principles into every stage of AI development and deployment, fostering a culture of security and trust.
- Group:Audit, Leadership, Research
Connect With Me:
Ready to Strengthen Your Governance?
Let’s discuss how our expert-led audits can bring clarity and confidence to your technology strategy.