People
A named decision-maker for the engagement and an owner for each area in scope.
AI assessment approach
How an ENFTC AI assessment runs
From an agreed scope to a clear AI governance assessment, with separately scoped remediation and verification when needed. Emre Tuncoglu leads each assessment personally.
The engagement, step by step
-
Step 01
Scope
We agree the decision the assessment must support, the AI systems and processes in scope, the obligations to consider, the input needed from your team and the fee. You receive a written scope note before work starts.
-
Step 02
Evidence and assessment
I review relevant policies and system documentation alongside available tests, change records and operating evidence. Confirmed findings are distinguished from questions that need further evidence.
-
Step 03
Findings and remediation
You receive an evidence-backed posture, prioritised findings with nominated owners, and a remediation plan sequenced for practical delivery.
-
Step 04
Verification
Where closure needs to withstand challenge, corrective actions are re-tested against fresh evidence. Remediation and verification are separately scoped follow-on work.
What you supply
Evidence
Access to policies, standards, system and model documentation, test results and monitoring records.
Context
The AI systems and use cases in scope, and how they are used in practice.
Existing work
Risk, audit or compliance material we can build on rather than repeat.
Start with the material you already have. I organise the evidence, identify what is missing and bring focused questions back to the relevant owners.
Evidence handling and expert review
Before evidence collection, we agree confidentiality, access and permitted use of AI tools. I work from the material needed for the assessment and keep the source of each conclusion clear.
I am developing ENFTC's consultant workbench to support repeatable ISO/IEC 42001 and EU AI Act analysis. I review and approve every client conclusion and explain the evidence behind it.
What you receive
A written assessment report covering the agreed scope, the evidence-backed posture, the limits of that evidence, prioritised findings and a remediation plan — presented in a short walkthrough for the people who have to act on it.
Next step: discuss your AI assessment, read the AI governance assessments, or read more about Emre.
Discuss your
AI assessment
Start with a short description of the AI system, the decision you need to make and any deadline. I'll outline the proposed scope, the input needed from your team and the fee before you commit.