S2 · Governance & adoption build

Foundations done
in sixty days.

A 60-day engagement that establishes the governance scaffolding, activates baseline policies, builds your initial use-case register, and produces a 90-day execution plan. The starter package for organisations who know they need structure but cannot wait six months to get it.

Book a discovery call All services
Engagement summary

What we deliver, and why.

The AI Foundations Programme is the engagement we recommend when an executive team has decided to act and needs the underlying scaffolding in place quickly. Across sixty days we produce policies, activate the use-case register, design the AI risk framework, run executive education, and build the next 90 days of execution into a plan your board can approve. It is the fastest credible path from "we should do something about AI" to "we have something to defend."

The phases

How we run this engagement.

  1. Mobilise

    Establish the steering group, confirm scope, baseline existing artefacts, and align on the target operating shape we will produce by day 60.

  2. Design & draft

    Author the AI policy suite, design the use-case register, draft the AI risk framework, and shape the procurement controls. All in your house language.

  3. Activate

    Land the policies through executive sign-off, populate the register with current and proposed use-cases, run education for the leadership tier and selected business areas.

  4. Plan & hand over

    Produce the 90-day execution plan, brief the board, hand over governance to your nominated owners, and document the path to a S3 or S4 next phase if relevant.

Deliverables

What you actually receive.

Every artefact below is yours to keep, drafted in your house style and language, and designed to be defensible to your board, audit committee, or regulator.

  • AI Acceptable Use Policy
  • AI Risk Framework
  • AI Use-Case Register (live)
  • AI Procurement Controls
  • Executive education programme
  • AI Governance Forum charter
  • 90-day execution plan
  • Board briefing pack
Frequently asked

Answers to the questions we get most.

It is a foundation, not a full assurance position. S2 produces the artefacts and structures auditors expect to see; S4 (Governance & Compliance) is the engagement designed to produce defensible audit evidence at depth.
Yes. APRA-regulated entities, public sector agencies, and healthcare providers each receive policy and framework variants reflecting the obligations and language of their regulator.
Yes, and we recommend it. Most procurement decisions are improved when made under a freshly-activated risk framework rather than retrofitted to one signed last year.
A nominated executive sponsor (often a CRO, CFO, or COO), a steering group of three to five executives, and a single operational lead who owns delivery handover.

Want this delivered?

Book a 30-minute discovery call. We'll confirm fit, walk you through the playbook in detail, and shape a proposal calibrated to your context.

Book a discovery call Explore other services