Approach
We work from public, defensible frameworks, so your program stands up to a regulator, an auditor or a customer questionnaire, and does not depend on us.
One method for both technologies
Inventory
What AI and what cryptography are in use, where, with what data, and who owns each.
Own
Who decides, who accepts the risk, and what the board or council needs to know.
Plan
What to fix, restrict, migrate or retire, in priority order, with what vendors must deliver.
Report
Progress and decisions, on one page, every quarter.
How an engagement starts
- 01
Free 30-minute call
Optional. What worries you, where AI and cryptography matter to you, and which rules apply.
- 02
Free assessment
Answered online: plain questions about how you use AI and how you protect data today.
- 03
Gap report
A written view of the gap between what you do and what you need to do, in priority order.
- 04
Free results review
We go through the gap report together and agree what, if anything, comes next. No obligation.
Ways to work with us
One-off, month to month, or a 3-, 6- or 12-month commitment. Pricing is set for each client in a written proposal.
| Form | AI | Quantum readiness |
|---|---|---|
| Free entry | Free AI risk assessment: the four steps above. | The readiness questions on the Quantum page, worked through in the free results review. |
| One-off assessment | Shadow AI inventory, AI vendor risk, AI privacy and GenAI, AI training data. | Quantum Readiness Assessment. |
| Program (3, 6 or 12 months) | AI governance and risk management as part of the security program. | PQC Migration Program Leadership. |
| Targeted engagement | An AI policy, a board briefing, or AI terms for one contract. | A board or council briefing, a vendor questionnaire, or crypto-agility requirements for one procurement. |
| With partners | Technical AI testing and implementation. | Cryptographic discovery tools, certificate and key changes, implementation and testing. |
Leadership, not implementation
We lead, plan and check. Your team, your providers or our partners make the technical changes, against requirements we write. We do not sell AI or cryptography products or take vendor commissions.
Frameworks we work from
- NIST AI Risk Management Framework 1.0 and its Playbook
- NIST post-quantum standards: FIPS 203, 204 and 205
- NIST CSF 2.0 (with Hudson Valley CISO and CyberIntelPro)
- NIST Privacy Framework (with Privacy Medic)
- HIPAA, NYDFS Part 500 and your contracts, where they apply
Start with the free assessment
Free 30-minute call, free assessment, gap report and free results review. No obligation. Or write to support@securitymedic.com.
Book a free 30-minute call