Governance · Reviewed October 2026
AI Governance Advisory
Acuity helps boards and management teams make practical decisions about AI use. We start with the tools people already use and the controls you already have, then work through responsibility, risk and the changes that need attention. Ger Perdisatt leads the work and holds a personal ISO/IEC 42001 Lead Auditor qualification.
You should be able to explain which uses are authorised, who checks the output and what happens when something goes wrong. We help connect those answers to the way your organisation works.
Where most engagements start
Need to show your board that AI is under control?
Start with a conversation about your current AI use and the decisions you need to make. We agree the scope and fee before work begins.
The review can help establish what needs attention and what can wait. Any further implementation work is agreed separately.
Discuss a governance review
Tell us what needs to change and any timing you are working towards. Ger will review your enquiry.
Ger Perdisatt: ISO/IEC 42001 Lead Auditor
Ger holds a personal Lead Auditor qualification in ISO/IEC 42001:2023, the international management system standard for AI. This informs our advice on management systems and audit preparation. Certification of an organisation is a separate assessment by a certification body. What that means in practice →
Can you explain how AI is being used in your organisation?
An inventory is a useful starting point. Record the purpose of each use, the information involved and who is responsible. That gives you a basis for deciding where a closer review is needed.
Scope
What AI governance means in practice
The work starts with your actual use of AI. We review the controls already in place and agree the changes needed, including policy wording, approval responsibilities and records of decisions. Implementation support is scoped to the organisation.
What the work can cover
Regulation
Why this matters now
AI obligations depend on the intended use and your role in providing or using the system. The EU AI Act identifies specific high-risk uses; a tool is not automatically high-risk because a business uses it in HR, insurance or customer service.
A useful review connects the applicable rules to the actual workflow, including the information used, the people affected and the checks before anyone acts on an output. Keep the inventory and decisions current as tools and their uses change.
Check the requirements for your use. The European Commission explains the different obligations for providers and deployers in its AI Act guidance.
Proof
What this has looked like in practice
Board decision support
A tailored board session examined the quality of AI-assisted information, responsibility for reviewing it and proportionate oversight. The work produced a session deck and decision prompts for discussion.
Policy and authorised use
A policy review checked whether written rules matched the AI tools being authorised. The resulting position note addressed supplier safeguards and proposed wording for the organisation's own review.
Your consultant
Who you actually work with
Ger Perdisatt
AI Governance Consultant · Founder, Acuity AI Advisory
Ger leads the advisory work, from understanding the problem to discussing the recommendations with your team. Scope and responsibilities are agreed at the start.
His experience in operations and board roles informs the advice, including the effort needed to maintain a governance process after it has been introduced. Full background →
Credentials
Questions
Common questions
For explanations of ownership and oversight, read our AI governance questions and answers. For questions about assessing potential harm and managing suppliers, see the AI risk guide.
What is an AI governance framework?
It sets out who is responsible for AI use, how proposed uses are assessed and how problems are handled. It should connect the policy to actual decisions, including who approves a tool, what staff may put into it and when a use needs further review.
What does an AI governance consultant do?
We help you understand the AI already in use, assess the relevant risks and put proportionate responsibilities and review processes in place. The starting point is your organisation's work and existing controls. The scope is agreed with you before the engagement begins.
Do Irish companies legally need an AI governance policy?
The obligations depend on the system, its intended use and whether your organisation is a provider or deployer. Some uses fall within the AI Act's high-risk categories; not every HR tool, insurance use or customer-facing system does. A policy can help organise responsibilities, but a policy on its own does not establish compliance. Check the requirements that apply to each use, alongside data-protection and sector obligations.
How long does a governance engagement take?
That depends on the systems in scope, existing controls and the decisions that need to be made. We agree the work, responsibilities and timing after understanding your starting point. A focused review and an organisation-wide implementation are different pieces of work.
Do we need another system to manage AI governance?
Not necessarily. We start with the tools and processes you already have. A smaller organisation may be able to maintain its inventory, approvals and review records in its existing environment. New software should solve a specific need that the current arrangement cannot meet.
Does our board need a dedicated AI committee?
There is no single committee structure that suits every organisation. Existing board and risk arrangements may be sufficient if responsibilities, reporting and escalation are clear. More extensive AI use may warrant specialist oversight. The structure should reflect the decisions and risks the board actually faces.
Put governance into practice
AI Register is Acuity's governance tool and guidance resource. Explore practical examples of recording AI use, assigning responsibility and reviewing decisions.
Explore AI Register's governance guidesTalk to us about AI governance
A structured conversation about your current AI use, your regulatory exposure, and what governance would actually look like for your organisation.