Home · Services
Services

Diagnose. Design. Embed. Sustain.

Four stages, in order. Each produces an artefact the next one uses. Nothing is sold before the diagnostic says it is needed, and no stage is compulsory once the record stands on its own.
01 · The four stages

What each stage produces.

A stage is a tense of the engagement. A pillar is a domain of risk. No word appears in both.
01DiagnoseFind where the risk sits, against evidence you already hold.
02DesignPut accountability, appetite and lifecycle control in writing.
03EmbedGive your people literacy that names your tools and your escalation route.
04SustainKeep the record current, dated and defensible on a cadence.
Stage 01

Diagnose

AI Governance Health Check · Boardroom Diagnostic

A four-week, fixed-scope diagnostic across all fourteen dimensions, scored against evidence you already hold. It is the entry point to everything else, and the only engagement that never requires a prior one.
  • 01

    Executive Scorecard

    One page. Fourteen dimensions, each classified and stated. Tabled at a risk committee without translation.

  • 02

    Detailed Findings Report

    Ten to fifteen pages. Evidence reviewed, gaps observed, exceptions named, owners assigned.

  • 03

    Boardroom Diagnostic

    Six pages your directors can work through in half an hour. In the reference library, before any engagement.

See the Health Check ↗

Stage 02

Design

AI Governance & Evidence · Agentic AI Governance

Turning the diagnostic into an operating model: named accountability, a stated appetite, lifecycle control over models, vendors and agents, and an evidence cadence that survives the quarter it was built in.
  • 01

    Operating model

    Fourteen dimensions with control intent and evidence expectation for each.

  • 02

    Agentic AI governance

    Inventory, autonomy and consequence tiering, authority, identity, permissions, human approval and decommissioning for the agents you build, buy or commission.

  • 03

    Board reporting structure

    A standing format for tabling AI risk in your audit and risk committee's own language.

See the governance practice ↗

Stage 03

Embed

AI literacy, delivered through Mycelium Academy

The human pillar, evidenced like every other. Modules configured to your tool register, your escalation route and your data classification, and a signed record of what your people were shown.
  • 01

    Configured modules

    Your approved tools by name, your escalation channel, your classification tiers, your examples.

  • 02

    Governance Pack

    A dated record of what staff were shown, who approved it, and when it expires.

  • 03

    Platform linkage

    Lodged alongside governance, security and operations evidence, not in a separate LMS report.

See Mycelium Academy ↗

Stage 04

Sustain

Evidence Platform

The record, kept current. Every board-level claim traces back to a human-approved artefact, a named owner, a date and a decision, and stays traceable across cycles rather than being rebuilt each time.
  • 01

    Live AI register

    Every system registered, owned, risk-rated and refreshed on a cadence.

  • 02

    Evidence cycle

    Requests issued to named owners, reviewed by a named human, appended and never overwritten.

  • 03

    Published pack

    A versioned PDF an auditor can follow end to end, with an attestation page for the sponsor.

See the Evidence Platform ↗

Sectors

The framework is sector-neutral. The accountabilities are not.

Each sector edition keeps the fourteen dimensions intact and rewrites three layers around them: the regulator map, the evidence expectation, and the board language.

See the sector editions ↗

Start here

The first call is diagnostic.

Thirty minutes. No pitch. No proposal until it makes sense.

Book a diagnostic Run the Boardroom Diagnostic
30-MINUTE INITIAL DIAGNOSTIC & SCOPING CALL · BOOK DIRECTLY