Answers to the questions we get asked most often.

Ongoing senior judgement → retained Fractional CIO. Defined view or redesign → fixed-scope product.

MD and board carry the risk; internal IT lacks the depth for the decisions now required.

Assurance reports to sponsor/board, separate from delivery. Findings are not filtered.

Start with the decision, not a generic framework. Exposure Audit if you need a view of AI use including Shadow AI.

Policy states expectations; a system connects ownership, decision rights, records, controls and review rhythm.

Useful where proportionate; not the starting answer to every question. Establish foundation first.

Incorporation alone does not decide. Depends on role, system, market connection. Establish facts; obtain qualified legal advice. [AI-S-06]