AI SECURITY · AI PRIVACY · AI GOVERNANCE
Use AI with your eyes open.
Security and privacy for AI, and AI for security and privacy. Vendor-neutral leadership for organizations that are adopting AI faster than they can govern it.
Start with four questions
Can you answer each of these with evidence? The free assessment finds out where you stand.
- 01Which AI tools are people here already using, and what data goes into them?
- 02Which AI vendors hold our data, and can they train on it?
- 03Who owns an AI decision, and who accepts its risk?
- 04What do HIPAA, NYDFS Part 500 or our contracts already require of our AI use?
Security and privacy for AI
Each engagement is delivered by the SMC practice that owns that discipline. Start anywhere; most clients start with the inventory.
Shadow AI / AI System Inventory Sprint
Find every AI tool, integration and data flow in use, who owns it, and what data reaches it. The inventory every other AI decision depends on.
2 weeks
CyberIntelProAI Vendor & Supply-Chain Risk Assessment
An independent look at how an AI provider stores, processes and retains your data, what it trains on, and which contract terms you need.
1 week per vendor
Hudson Valley CISOAI Governance & Risk Management
Policy, ownership, risk acceptance and board reporting for AI, run as part of the security program rather than beside it.
Privacy MedicAI Privacy & Data Protection for GenAI
Privacy impact assessment for generative AI use: personal data in prompts and outputs, notices, consent and data subject rights.
Privacy MedicAI Training Data Assessment
Where training and fine-tuning data came from, what rights attach to it, and what personal or confidential data it holds.
AI for security and privacy
Choosing AI for your program
Which AI features in your security and privacy tools are worth turning on, what they need from you, and what to keep away from them.
Governing the AI you adopt
The same inventory, vendor review and risk ownership we apply to any AI system, applied to the AI inside your security stack.
How we use AI ourselves
AI helps us draft and organize. A person reviews every finding and every recommendation, and your data goes to no AI service you have not agreed to.
The NIST AI RMF, applied
The NIST AI Risk Management Framework 1.0 is our anchor: public, free to use, and named in state AI law. Texas's Responsible AI Governance Act, for example, names its Generative AI Profile among the frameworks that support a liability defense (HB 149, Sec. 552.105).
Govern
Policy, roles, risk tolerance and accountability for AI. Who may adopt what, and who signs off.
Map
The inventory: each AI system, its purpose, its data, its users and the people it affects.
Measure
Evidence about each system: how it handles data, how it fails, and how you would know.
Manage
Decisions and follow-through: what to fix, accept, restrict or retire, in priority order.
Get your free AI risk assessment
Free 30-minute call, free assessment, gap report and free results review. No obligation. Or write to support@securitymedic.com.
Book a free 30-minute call