Services
GRC is the foundation of everything we do. AI Governance is the specialist practice for organisations adopting or scaling AI.
Primary services
Two focused categories. Depth without claiming to do everything.
01 · Foundation
Build a governance foundation that works.
Practical governance, risk, compliance and assurance — including cyber and information risk — for organisations that need clearer ownership, stronger controls and decision-ready evidence.
02 · Specialist
Govern AI with confidence.
Govern AI with practical frameworks, risk assessments, policies, lifecycle controls and assurance — as part of a broader GRC approach.
How engagements start
Start with a focused diagnostic. Implementation and ongoing support are available when they are useful — they are not required.
Start with clarity
Choose the Health Check that best fits your organisation. We identify the gaps, priorities and practical next steps before larger work is commissioned.
Entry offer
A focused review of your governance, risk, compliance and control environment to identify the issues that matter most.
Deliverable: GRC Health Check report + prioritised roadmap
From £1,500
For organisations that want clarity before deciding what to fix.
Start a GRC Health CheckEntry offer
Understand how AI is being used, where governance and risk gaps exist, and what your organisation should address next.
Deliverable: AI Governance Health Check report + prioritised roadmap
From £1,500
For organisations using or introducing AI.
Start an AI Governance Health CheckNeed help putting the recommendations into practice?
Octakor can advise, design and implement the required governance, controls, policies and processes — whether you need help with selected priorities or a wider programme.
Follow-on or standalone
Turn identified gaps into practical governance, controls and evidence — and prepare for ISO/IEC 27001 or ISO/IEC 42001 where required.
Deliverable: Implemented governance improvements + supporting documentation and readiness evidence
Scoped to your requirements
For organisations that want Octakor to help implement the solution, not simply identify the problem.
Discuss implementationFormal certification is undertaken by an independent certification body.
Frameworks & standards
Standards and frameworks provide structure. Octakor helps organisations apply them proportionately within a broader GRC approach.
ISO 27001
Information security
ISO 42001
AI management
NIST CSF
Cyber risk
ISO 31000
Risk management
COSO
Internal control
SOC 2
Assurance
Frameworks are tools, not the whole answer. Octakor uses them to structure governance and controls within a broader GRC approach. We are not a certification body.
Next step
Tell us what you are trying to solve. We will help you identify the right starting point.