part-of-earth-with-sun-rise-and-lens-flare-over-th-2022-12-16-03-24-14-utc.jpg

SERVICES

Build and mature your AI, data, & privacy governance, risk, and compliance program

Artificial Intelligence (AI) Governance, Risk, & Compliance

CAPABILITIES

Independent outside advisor to help you adopt a trustworthy and ethical approach to AI system integration

Design your AI governance program

Draft AI principles, acceptable use policies, and procedures that align with your business strategy

Identify and prioritize high impact AI use cases and resources

Lead internal cross-functional teams to create company-specific AI playbooks and templates

Apply global AI risk management frameworks such as ISO 42001 and the NIST AI RMF

Advise decision makers on AI vendor selection and contractual requirements

Provide training to ensure the workforce is "literate” in AI

Craft AI disclosures to meet transparency and notice requirements

Advise management regarding ethical whistle-blowing and accountability programs

Organizations that successfully embrace AI today will outpace their non-adoptive competitors in a short amount of time.

Gaining a competitive advantage is critical, but currently most organizations leverage only 20% of the data they collect.

Success depends on a solid foundation that ensures an ethical and responsible application of new technology.

That foundation includes identifying and cataloging data, defining your strategy and top use cases, and building a governance architecture, policy suite, and training program that demonstrates to regulators your company’s ethical, transparent, secure, and effective application of AI systems.

AI governance is for every business, not just the big players.

Governance Overview

Worldwide Data Protection and Privacy Compliance

Data is the fuel of the modern global economy.

1GDPA helps companies design and develop robust data protection and privacy programs that survive contact with regulators across the world.

1GDPA applies globally recognized standards such as ISO 27001, 27701, 29100, and the NIST Privacy RMF.

Capabilities:

Data protection and privacy program development, applying privacy by design and default (PbDD) from the start.

Fractional Privacy Officer (FPO) to address privacy matters on a cost effective, contract basis.

Data protection and privacy governance, risk, and compliance (GRC) assistance, including:

  • Data governance program discovery and assessment

  • Strategy development with champions & management's

  • Policy generation (privacy, cookies, data governance)

  • Data privacy and protection impact assessments (DPIA)

  • Data mapping and records of processing activities (ROPA)

  • Data subject access request (DSAR) policy & process

  • Data breach response

  • Employee training

International data transfer agreements

Global compliance, informed by strict standards (e.g. the EU General Data Protection Regulation - GDPR)

geometrical-patterned-blue-scifi-background-2022-12-15-23-11-33-utc.jpg

Training and Education

#1GDPA woman holding tablet doing video call

1GDPA offers training and education across your organization, from the executive team to key stakeholders responsible for AI and data protection compliance across the enterprise. Training takes place in person or virtually.

Topics cover business strategy, organizational, technical and physical controls, regulatory compliance, product design, and marketing considerations.

Capabilities:

Ethical AI and responsible data protection training seminars and workforce education (either live in-person or virtual)

Multinational Systems Engineering

1GDPA delivers decades of personal experience proudly supporting public service leaders in the fields of national security, homeland defense, veterans affairs, public health, and the federal judiciary.

1GDPA offers a seasoned perspective and proven technical approach based on core systems engineering principles to solve some of government’s most challenging data sharing and interoperability problems.

Capabilities:

Defense security cooperation (DSC) program design and systems engineering

Multinational command, control, communications, and computers (C4) data sharing

Systems engineering and technical assistance (SETA) support for privacy, cybersecurity, foreign military sales (FMS) and multinational interoperability