engagements: maturity assessments, AI risk appetite, taxonomy and policy, operating models (roles across the three lines, forums, decision rights, escalation), integration with enterprise risk, model risk, data, cyber and privacy, and ISO/IEC 42001 readiness. Run AI estate discovery (including shadow AI), use-case classification and risk tiering … view, ending in a prioritised roadmap. Assess AI risk at use-case level, inherent and residual, covering customer and conduct harm, data and privacy, model and output, security and operational risk, across machine learning, generative AI and agentic AI. Design proportionate controls and guardrails, human oversight and approval workflows ...