Services

How we work

Engage us for the whole journey or for the one part you are stuck on. Everything is delivered as documentation you own, in language your team can use, without stopping the day job.

Book a Readiness Assessment

  1. 01 Briefing

    Free and 30 minutes long, with no slides and no pitch.

  2. 02 Readiness Assessment

    Where you stand, and whether to scale.

  3. 03 AIMS programme

    A working AI Management System in 12 or 16 weeks.

  4. 04 Certification audit

    By an independent, accredited body.

Readiness Assessment

Your AI is already at work.

Many AI tools arrive quietly, through a supplier update or a new feature in software you already run. The Readiness Assessment lists the AI tools we find in your organisation, names an owner for each and shows what ISO/IEC 42001 asks of it.

It is a short, structured diagnostic that answers one question before any other work starts: should you adopt or scale AI at all, and on what conditions? The scoring rests on evidence from your organisation, not on a self-assessment questionnaire.

Book a Readiness Assessment

  1. 01 Inventory

    Every AI tool we find in your organisation, listed, including the ones that arrived inside other software.

  2. 02 Owners

    A named person for each one.

  3. 03 Risks

    The primary risk of each tool, scored on evidence against what ISO/IEC 42001 asks.

  4. 04 Roadmap

    A clear recommendation: proceed, proceed with conditions, pilot only, remediate and re-assess, or do not scale yet. Where it helps, a costed plan for closing the gaps.

What we offer

From readiness to certification

01

AI Readiness Assessment

The diagnostic described above. It answers whether you should adopt or scale AI at all, and on what conditions, and ends in a clear recommendation and, where relevant, a costed plan for closing the gaps.

Discuss this: AI Readiness Assessment

02

AI strategy workshop

A facilitated session, or a short series, with your leadership team that turns “we should probably do something with AI” into a prioritised, realistic plan: which use cases are worth pursuing, which are not yet, and in what order, given your data, your people and your risk appetite.

Discuss this: AI strategy workshop

03

AI implementation support

Hands-on advisory support as AI use cases move from pilot to everyday operation. Advisory input, not systems integration. Available as a day-rate retainer once the assessment or strategy stage is done.

Discuss this: AI implementation support

04

Flagship programme

ISO/IEC 42001 AI Management System implementation

A structured programme of 12 to 16 weeks that takes your organisation from where it stands to a working AI Management System that conforms to ISO/IEC 42001 and is ready for audit. The 2 tracks are scoped by the number of sites and AI use cases, not by company size.

See the 2 tracks

05

AI estate consolidation

For organisations already running several AI or analytics systems, built separately, with no shared standards and no single view of what is in production. We reframe the ask from “merge everything into one system” to one platform, one management system and many governed use cases. It starts with a short readiness assessment, then a phased programme of typically around 64 weeks across 5 phases that delivers value early through a time-boxed, governed pilot.

Discuss this: AI estate consolidation

The flagship programme

The AI Management System programme has 2 tracks

Both are scoped by how many sites and AI use cases are in scope, rather than by headcount. Both end in the same place: a working AI Management System you own, ready for an independent audit.

12Weeks

Foundational AIMS

A single site with a small number of AI use cases in scope.

16Weeks

Full scope AIMS

Several sites, or a broader inventory of AI systems.

+Optional add-on

Certification support

Prepares you for the independent certification body's audit. You pay the audit fees directly to the certification body, and they sit outside anything quoted for either track.

Both tracks are quoted individually once the scope is clear. Ask for a figure at the introductory briefing and you will have one in writing.

A note on certification. Certification is awarded by an independent, accredited certification body. It cannot be issued by the people who helped you implement, and you should be wary of anyone who offers both. We never audit our own work. Our job is to prepare you so the audit holds no surprises, and to be in the room while it happens.

Your roadmap

Your roadmap to certification

The roadmap has 7 steps, from measuring the distance to holding a certificate and keeping it. We deliver the first 3 as part of the flagship AIMS programme. The last 4 belong to an independent certification body, and we prepare you for them and sit in the room.

Step 01 / 07

With Wright Frameworks · steps 1 to 3

Certification body · steps 4 to 7

  1. Wright Frameworks · opening weeks of the AIMS programme

    Gap analysis

    Know the distance before you start

    Every clause of ISO/IEC 42001 assessed against what you already do, including AI systems in scope that nobody had counted. This sets the real scope and effort for everything that follows, before either of us commits to a plan.

    Output

    • Clause-by-clause gap map with owners and dates
    • AI use case register: purpose, primary risk, owner
    • Reuse map against any ISO 9001 or ISO/IEC 27001 you already hold

  2. Wright Frameworks · the core of the AIMS programme

    Implementation

    Building the system

    Scope, AI policy, risk assessment, AI System Impact Assessments and Annex A controls, built and evidenced until the management system is something your team runs, not a folder nobody opens.

    Output

    • A defensible AIMS scope statement and AI policy
    • Risk register and completed AI System Impact Assessments
    • Statement of Applicability with justified controls
    • Documented information under proper control

  3. Wright Frameworks · closing weeks of the AIMS programme

    Internal audit and review

    Test it yourself before anyone else does

    An internal audit against the standard and a management review with real AI content, so gaps are found and closed on your own terms first. This is how you go into Stage 1 knowing where you stand.

    Output

    • Internal audit programme, reports and findings
    • Management review minutes with AI agenda items
    • Corrective actions raised and closed
    • An indexed evidence pack ready for the audit

  4. Certification body

    Stage 1 audit

    Prove the documentation holds up

    The certification body's first formal audit checks that your management system is documented and conforms to the standard, before it looks at whether it works. We prepare you for it and we are in the room when it happens.

    We prepare you for this audit.

    Output

    • Stage 1 findings reviewed and closed
    • The Certification support add-on is available for this step
    • A clear picture of what Stage 2 will test

  5. Certification body · certified for 3 years

    Stage 2 audit

    Prove the system works

    The certification body's second audit, on site, tests whether the management system operates day to day. It covers record sampling, process walkthroughs and interviews. Pass it, and you are certified to ISO/IEC 42001 for 3 years.

    We prepare you for this audit.

    Output

    • Stage 2 findings and nonconformities handled
    • A certificate issued by the accredited body, valid for 3 years
    • A surveillance and re-certification plan agreed

  6. Certification body · years 1 and 2

    Surveillance audits

    Keep it alive, not just certified

    The certification body returns twice during the 3-year cycle to confirm the management system is maintained rather than left to lapse once the certificate is framed.

    Output

    • Evidence and risk register kept current all year
    • AI System Impact Assessments refreshed as models change
    • A position that is ready for audit ahead of each visit

  7. Certification body · year 3

    Re-certification

    Show it has improved, not just survived

    A full Stage 1 and Stage 2 audit repeats at the end of the 3-year cycle, this time looking for evidence of real improvement, not just that the original system is still standing.

    Output

    • Evidence of improvement across all 3 years
    • Stage 1 and Stage 2 re-audit supported end to end
    • A new 3-year certification cycle begins

Next step

Start with a free 30-minute briefing

No slides and no pitch. We look at where AI already sits in your operation, what ISO/IEC 42001 would ask of you, and whether it is worth your time.

Book a Readiness Assessment

Prefer email? Write to enquiries@wrightframeworks.co.uk.