axigetik: AI Security & Compliance Advice & Support

We also provide general purpose AI security and compliance advice and support, including in areas such as:

• Adoption of other legalisation, international standards, frameworks and tools for AI security and compliance (eg EU AI Act, NIST AI Risk Management Framework, MITRE ATLAS, OWASP for LLM Applications)
• N-party supply chain analysis for AI (TPRM) and Bill of Materials
• Implementing cloud-specific AI security and compliance implementation (hyperscalers especially AWS, and across foundation model providers, and frontier labs)
• Use of GRC automation platforms (eg Drata, Vanta) specifically to support AI security and compliance outcomes
• Providing independent or observer roles on customer's AI governance functions (boards, committees etc)

Every advisory engagement is different, and we're happy to work with you to shape an approach that delivers the AI security, trust, assurance and risk outcomes that create value for your business.

Specific AWS Services Addressed

If you use any of these AWS current generation AI services such as Amazon Bedrock (including AgentCore and Nova models), Amazon Sagemaker (including Studio, Custom Models, Ground Truth, Hyperpod, Inference, Autopilot/MLflow), SDKs such as Strands, Amazon Kiro or Amazon Q (including QDeveloper and QBusiness) we can provide very specific advice regarding AI security and compliance concerns, and how to use AWS tooling such as Organizations, Identity & Access Management, Key Management, Config, CloudFormation, CloudFormation, Control Tower, Security Hub, Audit manager) against those workloads. We also bring experience with the widely adopted older generations of AWS AI services where security and compliance concerns continue to evolve: Augmented AI, CodeGuru, Comprehend, DevOps Guru, Fraud Detector, Forecast, Kendra, Lex, Lookout, Personalize, Polly, Rekognition, Transcribe, Translate, Textract.