AI Risk Assessment
Assess your AI-related risks and build a prioritised action plan.
AI risk made actionable
Our AI risk assessment gives organisations a practical way to identify AI use, assess risk and prioritise action.
We help you move beyond high-level principles by defining clear next steps, supporting governance and strengthening controls.
We also offer the option to assess AI use cases through a Māori data lens, with a focus on cultural sensitivity, data sovereignty and potential community impact and harm.
.png)
How it works
Understand AI use
Identify approved tools, shadow AI, vendors, data flows and business use cases.
Deliverables: Priority gap analysis
Assess risk and maturity
Evaluate governance, privacy, security, fairness, oversight, vendor risk, monitoring and optional Māori data governance considerations.
Deliverables: AI risk maturity profile, optional Māori lens summary
Act with confidence
Gain visibility and determine next steps.
Deliverables: Dashboards, remediation roadmap
This is for you if...
Your organisation is using, trialling or planning to adopt AI tools. It is particularly useful if you want clearer governance, better visibility of AI use, stronger oversight and a more responsible approach to AI adoption.
Who should attend?
We recommend business owners, risk and governance leads, privacy teams, security teams, legal or procurement representatives, technology teams, and Māori or cultural advisors where relevant.
Timeframe
There will be an initial 2-hour workshop with your business stakeholders. A risk report will be generated within two weeks of the initial workshop.
Pricing
$6000
FAQs
What is an AI risk assessment?
- Our AI risk assessment helps organisations understand how AI is being used, assess control maturity, identify risk gaps and prioritise remediation.
Why do we need an AI risk assessment?
- AI adoption is moving quickly, often faster than governance and control frameworks can keep up. An AI risk assessment helps your organisation understand where AI is being used, what risks may exist, whether current controls are strong enough and what actions should be prioritised to reduce exposure.
What types of AI use does the risk assessment cover?
- We can assess a wide range of enterprise AI use cases, including generative AI tools, copilots, AI-enabled SaaS platforms, internal automation, decision-support tools, customer-facing AI services and third-party AI integrations.
Why is the Māori data lens important?
- For organisations with Māori data in their care, standard privacy and security controls may not be enough on their own. A Māori data lens supports a more responsible and Aotearoa-relevant approach by recognising Māori data as taonga and helping organisations consider governance, cultural impact, trust and appropriate decision-making.
Can an AI risk assessment help identify shadow AI?
- Yes. It helps organisations consider the risks of shadow AI, including unapproved tools, unauthorised use, browser-based AI services, plugins, and workflows that may sit outside formal governance or visibility.
What are the T&Cs?
- T&Cs apply: Subject to availability, valid in NZ only.
Why work with Theta
GenAI Centre of Excellence
A dedicated and highly experienced team of AI specialists.
Local support
A New Zealand-based support team with global experience.
Flexible engagement
We work collaboratively with your team, remotely or onsite.
Actionable outcomes
Clear, prioritised recommendations you can implement immediately.
End-to-end delivery
We support you through the entire lifecycle of your project, from design to implementation and support.
Trusted partner
30+ years as a leading NZ-owned and operated IT consultancy in NZ.