A practical reference for the four families of AI agent evaluation metrics: accuracy, cost, safety and reliability. Includes computable definitions, starter thresholds, evaluation-set design, LLM-as-judge validation, and how to wire the numbers into a release gate.
A practical guide to monitoring AI agents in production: the four signal groups that matter, run tracing, quality drift detection, prompt-injection and tool-abuse signals, cost per successful outcome, and a staged 90-day rollout.
AI system inventory work starts with an uncomfortable question nobody can answer: which AI tools are we actually using? This guide gives you the register that answers it — a field-by-field template, the five places shadow AI genuinely hides, seven discovery methods that surface tools nobody declared, a two-week sweep plan, a four-tier triage scale, and a clean mapping to ISO/IEC 42001, the NIST AI RMF and the EU AI Act.
AI risk assessment is the step most organisations skip between “this tool looks useful” and “forty people now depend on it”. This guide gives you a two-page template you can fill in section by section, the seven risk categories worth scoring, a likelihood-impact-exposure scale that produces comparable numbers, the six steps of the exercise itself, the five controls that genuinely move a score, and a clean mapping to the NIST AI RMF, ISO/IEC 42001 and the EU AI Act.
AI vendor lock-in is the bill that arrives eighteen months after a successful pilot. This guide breaks dependency into five distinct types — model, data, workflow, integration and commercial — explains why AI switching costs behave differently from classic software migrations, sets out the contract clauses that cap your exposure at signature, covers the architecture decisions that keep switching cheap, and gives you a four-page exit plan you can write in a day and rehearse once a year.
Your staff are already using AI at work; the only question is whether they are doing it inside rules you wrote. This guide gives you a complete AI acceptable use policy template for employees: the nine clauses that actually carry weight, model wording you can copy for scope, approved tools, data entry, human accountability, disclosure and breach handling, a three-tier approved and prohibited tool model, a data table showing what may never be pasted into a public chatbot, a rollout plan that gets the policy acknowledged, the mistakes that quietly kill enforcement, and the four numbers that tell you whether any of it is working.
ISO 42001 certification costs a UK organisation roughly £12,000 to £180,000 in year one and takes six to fifteen months, and neither range means anything until you know what moves it. This guide splits the cost into the four budgets hiding behind one number, shows how certification bodies calculate audit days under ISO/IEC 42006, sets out a month-by-month timeline from gap analysis to certificate decision, explains the five things that reliably push the date, models the three-year cost that matters more than year one, and lists six levers that cut spend and elapsed time without weakening the certificate.
A practical playbook for testing AI agents before launch: build a real evaluation set, red-team prompt injection and tool abuse, prove reliability under load, and gate every release on objective checks.
A working checklist of 30 questions to ask any AI platform vendor before you sign, covering company viability, model provenance, data rights, security, pricing and exit terms.
A realistic ISO 42001 implementation lands between roughly £15,000 and £90,000 in the first year, and almost none of that sits on a single invoice. This guide splits the number into certification body audit fees, external support, tooling and internal staff time, maps all 38 Annex A controls you will have to evidence, explains how the AI impact assessment differs from a risk assessment, sets out a realistic six to fifteen month timeline from gap analysis to certificate, and lists nine levers that genuinely reduce spend without weakening the certificate.
