AI advisory
Strategic and architectural advisory on AI in security, for the CISO, the leadership team, and the board.
At FM CyberSecurity we use AI for everything from building presentations and developing AI-based security monitoring (Agentic SOC) to writing software. We have learned a lot about using AI, not least in the context of secure development.
- How do you secure AI agents and assistants?
- How can you safely let the business build its own applications and services?
- How do we secure the supply chain?
- How do we prevent business-critical data from being leaked by AI?
What we deliver
- AI risk register and governance framework
A dedicated register for AI risk, wired into existing risk management, with named owners and a decision cadence.
- Shadow AI policy and discovery strategy
The decision work before any operational discovery, what is allowed, what is logged, what is blocked.
- Agentic SOC adoption read
When an agent-driven SOC architecture fits your context, and when it does not.
- AI-assisted code policy
Governance for vibe coding inside engineering teams, from approved tools to SDLC requirements.
- EU AI Act readiness for in-scope systems
Classification of AI use against the AI Act categories, and what has to be documented per system.
- Board-level AI risk briefing
A half-day briefing scoped to the board meeting, in the language the board uses to make decisions.
How we deliver this service
- In a project
A bounded advisory engagement, typically two to six weeks, with written recommendations.
- As part of a service
The strategy layer above an operational AI-security engagement, or included in Secured by FM CyberSecurity.
- In a role at the customer
An ongoing AI governance advisor with a fixed cadence, for organisations that want to keep the topic live.
The platform we offer
Recent insights on AI advisory
- FM Cyber Breakfast: CrowdStrike
Live demos from the console: an agentic SOC, reports with Claude, our own SOC-Cockpit, and AI visibility. MESH Youngstorget, 18 August, 08:30 to 10:00.
- Fredrik Standahl in Digi.no on shadow AI in Norway
Digi.no published a Fredrik Standahl op-ed on treating AI as critical infrastructure and the Lovable breach as a warning sign.
- Fredrik Standahl in E24 on shadow AI in Norway
E24 published a Fredrik Standahl op-ed on shadow AI in Norwegian workplaces and the data exposure pattern behind it.