Adopt agentic AI safely and with confidence

A range of services designed to take your firm from first awareness of agentic AI to a fully governed, audit-ready, and continuously improving agentic transformation programme – at whatever pace your situation requires.

Agentic AI Risk Services - Gerido Agentic Risk Management Tool
assess-readiness
agentic-ai-readiness-assessment
Assess Readiness

Agentic AI Readiness Assessment

The Agentic AI Readiness Assessment is a structured and high-level diagnostic that maps your organisation across three categories of prerequisites – strategic, technical and operational, and organisational – in a single 90-minute session. A written report follows within 24 hours, ready to share with your line manager, Head of AI, or CRO.

Investment

£500
for the Core Diagnosis
Fixed fee · payable on booking

What you get

  • A high-level readiness map.
  • Prioritised next steps.

ROI

20x - 30x over 12 months

When It Is Vital

  • When you intend to deploy operational agentic workflows (beyond just admin assistants) and want to know what you should do to be ready to manage them.
  • When a board member, regulator, or auditor has asked a question about agentic workflows that you cannot yet fully answer.

Factors That Determine Price

Not applicable

Customise Your Service

Core Diagnosis Plus+
+£100

includes a 30-min Stakeholder Debrief one week after report delivery, e.g. for your line manager, CRO, Head of AI, or other stakeholders.

govern-agentic-ai
agentic-ai-governance-design
Govern Agentic AI

Agentic AI Governance Design

A structured governance programme built on Agentic Risks’ Agentic AI Governance Framework – covering the traditional governance foundations that remain relevant for agentic AI, plus the new controls needed for autonomous agents. We help you determine what to keep from your existing governance, what must evolve, and how to build a position that is defensible to regulators today and adaptable as the technology and regulatory environment develop.

Investment

£15,000 - £35,000

What you get

  • Gap analysis.
  • Customised design specifications for an integrated governance framework.

ROI

10x - 25x over 24 months

When It Is Vital

  • Vital if your deployed AI agents exceed what your existing governance was designed to manage.
  • Vital if ‘shadow agents’ are a concern: agents without formal governance review carry material risk, because they create outcomes, not just outputs.
  • Specifically required under ISO 42001 Clauses 5 and 6, DORA’s ICT risk framework, NIST AI RMF 1.0, and EU AI Act Article 9.

Factors That Determine Price

  • Your starting position – firms with strong non-agentic AI governance require less.
  • Extent of agentic-specific governance that has already been implemented.
  • The number and complexity of live workflows, agent types, and human oversight roles to be incorporated.
  • Need to comply with existing regulatory processes (ICAAP, ORSA, DORA ICT framework, ISO 42001 certification programme).

Customise Your Service

Annual agentic governance health check
+£6-10k/year

Structured annual reassessment against regulatory developments, changes in agentic deployment, and evolving best practice.

Regulatory examination / audit preparation
+£2.5k

Mock supervisor or ISO 42001 auditor examination identifying gaps before the real examination.

agentic-risk-assessments
pre-deployment-agentic-risk-assessment
Agentic Risk Assessments

Pre-Deployment Agentic Risk Assessment

A structured 7-step workflow-level risk assessment that ensures you embed your necessary risk controls into your agentic workflow. Delivered using Gerido©, this service will identify the agentic risks in a planned workflow, design risk treatment plans, and map the necessary agentic KRIs. Culminating in a CRO-ready risk report, you will avoid post-deployment remediation costs, speed up your build cycle, and gain a defensible answer to a regulator’s question, “How did you select the controls for your agentic workflow?”

Investment

£15,000 – £25,000

What you get

  • CRO-ready risk report.
  • Controls and KRIs your engineer can encode.
  • Upskill your team.

ROI

5x - 10x over 6 months

When It Is Vital

  • Vital when you want to launch an agentic workflow but are unfamiliar with the risks and controls you will need.
  • Required under DORA’s ICT risk framework obligations for all financial entities, and under EU AI Act Article 9 for high-risk systems.
  • Vital when you want your new agentic workflow to work first time avoiding costly post-deployment remediation.

Factors That Determine Price

  • Workflow complexity, organisational capability, expected scale of attack surface, and compliance requirements
  • Availability and completeness of documentation.
  • Number of stakeholders.

Customise Your Service

Presentation to AI Governance Committee
+£1,000

To create auditable evidence of oversight and control.

Adversarial testing specification
+£2,500

Formal test plan for red-teaming the agent’s controls – defines attack scenarios, expected responses, and pass / fail criteria.

Proprietary Methodology:

Gerido© Agentic Risk Management Platform

training
agentic-ai-executive-workshop
Training

Agentic AI Executive Workshop

A facilitated session of up to 3 hours for Board and ExCo members that converts agentic AI from a technical topic into a set of policy decisions. In the session, leaders will cut through high-level buzzwords to set policy and direction, determine their strategic risk appetite for delegating autonomy to AI agents, clarify governance and accountabilities, and select pilot use cases for immediate implementation.

Investment

£8,000 – £24,000
Up to 3hrs · virtual or in-person

What you get

  • Agentic Risk Appetite Statement.
  • An adoption strategy.
  • A selected pilot workflow.

ROI

5x - 12x over 12 months

When It Is Vital

  • At the outset of any agentic AI programme, when the organisation needs clear, strategic direction, informed decisions, and momentum from the top.
  • When you want to develop a strategic agentic capability and avoid risky, costly, and uncoordinated agent proliferation.
  • Vital when a regulator or auditor asks for evidence of board-level AI oversight.

Factors That Determine Price

  • Virtual versus in-person delivery (travel costs additional for in-person).
  • Size of the leadership group (standard up to 8; extended up to 20).
  • Number of Agentic Risks consultants needed, e.g. to run breakout sessions.
  • Degree of pre-session customisation and pre-read materials.

Customise Your Service

Coaching support
+£tbc

Customisable packages for your agentic AI executive sponsor.

Additional training packages
+£tbc

Sign up for other training solutions within 7 days of completion and receive a 15% discount on subsequent purchases.

Training provider to the global Institute of Risk Management and the UK Investment Association.

design-delivery-remediation
agentic-ai-use-case-prioritisation-roadmap
Design · Delivery · Remediation

Agentic AI Use Case Prioritisation & Roadmap

A structured engagement that identifies, evaluates, and sequences the agentic AI use cases that will deliver the greatest value for your organisation. We arrive with a curated library of use cases relevant to your business and work with your stakeholders to identify those with the highest potential. We then submit each shortlisted use case to our Pre-Deployment Agentic Risk Assessment. This produces the controls, effort estimates, and risk profiles you need to prioritise your investment decisions: business impact, feasibility, and expected ROI. The result is a execution-ready plan that tells you exactly which workflows to build, in what order, what each will cost, and what needs to be in place before you start.

Investment

£24,000 – £56,000
~4 – 8 weeks · fixed fee

What you get

  • Consensus on a prioritised, justified, phased roadmap designed for quick wins first and scale second.
  • Highest-impact lowest-risk rollout.

ROI

4x - 15x over 12 month

When It Is Vital

  • When you know agentic AI matters to your business but are unsure where to start or what to prioritise.
  • When you want to avoid costly, uncoordinated adoption – building the wrong workflows first, or building without proper risk controls.
  • When you need a defensible, board-ready plan that connects agentic AI ambitions to measurable business outcomes.

Factors That Determine Price

  • Number of business lines and asset classes in scope.
  • Number of stakeholders to interview.
  • Complexity of existing technology and data landscape.
  • Volume and complexity of use cases.
  • Regulatory jurisdictions to consider (e.g. DORA, EU AI Act).

Customise Your Service

Board presentation pack
+£3,500

Slide deck and executive briefing note enabling your sponsor to present to the board or ExCo without further preparation.

Agentic Risk Appetite Statement
+£3,500-£8,000

A board-level policy document defining the type and amount of agentic risk your company is willing to accept, giving direction to project and operational teams, and creating regulatory defence.

govern-agentic-ai
agentic-incident-management-procedure
Govern Agentic AI

Agentic Incident Management Procedure

When something goes wrong with one of your agents – reasoning failure, prompt injection, runaway loop, or unexpected tool interaction – you will want to recover fast, retain evidence, prevent recurrence, and communicate proactively with any external stakeholders. This service delivers a structured, tested, and agentic incident management capability covering detection, response, evidence, and recovery.

Investment

£17,500 – £35,000

What you get

  • Comprehensive AI Agent Incident Response Procedure.
  • Control gap analysis and action plan.

ROI

10x - 20x over 3 months

When It Is Vital

  • When you deploy agents that could trigger real-world outcomes.
  • When you have experienced an incident and need to strengthen your response procedure.
  • When you need help ensuring your agentic workflows comply with risk management and resilience rules, e.g. EU AI Act Arts 9, 20 & 73 FCA / PRA resilience rules, ISO 42001 (s. 8 & 10), DORA Arts 17–20, GDPR Art 33.

Factors That Determine Price

  • Number of in-scope agent workflows.
  • Complexity of tool and API ecosystem.
  • Single or multi-agent architecture.
  • Maturity of existing logging infrastructure.
  • Regulatory reporting obligations.

Customise Your Service

Follow-up internal audit
+£3,500

To review the completion of any actions arising from the gap analysis.

Annual incident readiness review
+£3,500/year
Red team incident simulation
+£10,000 - £45,000

Live adversarial agent exercise. [Launching soon]

Integration with operational resilience programm
+£3,500
agentic-risk-assessments
post-deployment-agentic-risk-assessment
Agentic Risk Assessments

Post-Deployment Agentic Risk Assessment

A structured review of agentic workflows that are already live. Using our proprietary, systematic, and verifiable agentic risk flags, we will determine whether your workflow is sufficiently controlled, e.g. ownership, behaviour boundaries, and stop authority. Delivered using Gerido©, it produces audit-ready findings and a prioritised risk treatment plan – giving risk managers a fast, defensible basis for action.

Investment

£10,000 - £20,000

What you get

  • Report of risk flags discovered, potential impact.
  • Recommended risk treatment plans.
  • Fast path to compliance.

ROI

8x - 20x over 12 months

When It Is Vital

  • When an agentic workflow is displaying issues, and you need a fast, defensible risk treatment plan.
  • When you need assurance that your agentic controls are effective, e.g. in preparation for an audit.
  • When you need to include a live agentic workflow within a documented risk framework, e.g. DORA compliance.

Factors That Determine Price

  • Workflow complexity.
  • Single or multi-agent architecture.
  • Whether the agent is live, paused, or in pre-production.

Customise Your Service

Express Service
+15%

Urgent? Let us know on your first call, and we will give you the earliest available time.

Remediation plan
+£3,500

Convert the recommendations into an action plan – task owners, sequencing, effort estimates, and deadlines.

Audit committee briefing
+£500

Plain-English summary of findings suitable for non-executive directors – framed around regulatory exposure and management response.

Quarterly risk flag retainer
+£3,500

Quarterly retainer to review your risk flags for changes to your risk posture.

Proprietary Methodology:

Gerido© Agentic Risk Management Platform

training
agentic-ai-capability-generator
Training

Agentic AI Capability Generator

A three-workshop programme bringing your core project team together under expert coaches to design, risk-assess, and plan the implementation of a specific agentic workflow safely. The programme produces a business case, a risk map with controls, a platform selection rationale, and an implementation plan as tangible, audit-ready outputs.

Investment

£24,000 – £54,000
Three workshops

What you get

  • Business case.
  • Risk map with controls.
  • Platform selection criteria.
  • Implementation plan.

ROI

2x - 4x over 24 months

When It Is Vital

  • When you want to show compliance officers, senior executives, and regulators where you placed the controls and why.
  • When you want to develop a strategic agentic capability.
  • When your team has strong technology capability but limited risk management experience.

Factors That Determine Price

  • Virtual versus in-person delivery across three sessions.
  • Size of the project team (standard up to 8; extended up to 15).
  • Number of Agentic Risks consultants needed, e.g. to run breakout sessions.
  • Degree of pre-session customisation and pre-read materials.

Customise Your Service

Coaching support
+£tbc

Customisable packages for your agentic AI executive sponsor.

Additional training packages
+£tbc

Sign up for other training solutions within 7 days of completion and receive a 15% discount on subsequent purchases.

Training provider to the global Institute of Risk Management and the UK Investment Association.

design-delivery-remediation
agentic-workflow-delivery
Design · Delivery · Remediation

Agentic Workflow Delivery

A design and implementation service for organisations that want support with deploying a specific agentic workflow. Our dedicated experts will ensure you navigate the process from design, risk assessment, and platform selection, to build, testing and deployment. Working either alongside your technology team or independently, we will deliver an agentic workflow and organisational capability that is structured, governed, and audit-ready from day one.

Investment

£8,000 – £60,000
Scope-dependent · discussed on consultation

What you get

  • Live agentic workflow and controls.
  • Measurable productivity gains.

ROI

4x - 15x over 12 months

When It Is Vital

  • When you want to leverage the benefits of agentic AI but need additional resource and capability to do it safely.
  • When speed and risk management are important to you.
  • When you need a properly documented project that will withstand regulatory scrutiny.

Factors That Determine Price

  • Single or multi-agent architecture.
  • Extent of configuration and training needed.
  • Degree of enterprise system integration required.
  • Timeline and sprint structure – phased delivery programmes are priced differently from single-sprint engagements.
  • Nature of post-launch support requirements.

Customise Your Service

Controls audit at 90 days
+£5,000

Structured post-deployment risk flag review, satisfying DORA’s continuous monitoring requirement.

training
audit-risk-compliance-agentic-bootcamp
Training

Audit, Risk & Compliance Agentic Bootcamp

A specialist two-day programme for risk managers, compliance officers, internal auditors, and HR professionals. You will learn how AI agents behave and the new class of risks they introduce. You will become familiar with the different levels of autonomy, their risk profiles, and how to control them. You will practice developing and challenging agentic risk treatment plans, navigating the regulatory landscape, and preparing for an agentic audit.

Investment

£16,000 – £36,000
Up to 30 participants · virtual or in-person

What you get

  • Control and governance artefacts.
  • Audit readiness checklists.
  • ISO 42001 and NIST AI RMF and compliant templates.

ROI

2x - 4x over 24 months

When It Is Vital

  • When you want your organisation to govern agents and keep them on track.
  • Vital for firms pursuing ISO 42001 certification or DORA compliance, where the risk and audit functions need to own the ongoing operation of the AI management system.

Factors That Determine Price

  • Virtual versus in-person delivery across three sessions.
  • Size of the project team (standard up to 8; extended up to 15).
  • Number of Agentic Risks consultants needed, e.g. to run breakout sessions.
  • Degree of pre-session customisation and pre-read materials.

Customise Your Service

Coaching support
+£tbc

Customisable packages for your agentic AI executive sponsor.

Additional training packages
+£tbc

Sign up for other training solutions within 7 days of completion and receive a 15% discount on subsequent purchases.

Training provider to the global Institute of Risk Management and the UK Investment Association.

design-delivery-remediation
agentic-workflow-remediation
Design · Delivery · Remediation

Agentic Workflow Remediation

A structured programme to return a paused or flagged agentic workflow to safe, controlled operation. Where a workflow has been halted or identified as inadequately controlled – whether following incident management, an audit finding, a regulatory challenge, or a proactive controls review – we diagnose the root cause, redesign and implement the controls that failed or were absent, retrain the agent where required, and produce the documented evidence that the remediated workflow is fit to relaunch or continue safely.

Investment

£8,000 – £30,000
Scope-dependent · discussed on consultation

What you get

  • Redesigned controls.
  • Retrained agent.
  • Relaunch assurance report.

ROI

8x - 20x over 3 months

When It Is Vital

  • Post-incident, when you need to diagnose root cause, remediate controls, and relaunch safely.
  • When you have identified control weaknesses requiring remediation before the workflow can continue.
  • When a live workflow is exhibiting risk flags, and you need rapid expert intervention.

Factors That Determine Price

  • Extent of diagnosis already conducted.
  • Number and severity of control failures.
  • Whether agent retraining is required or whether controls reconfiguration alone is sufficient.
  • Urgency.

Customise Your Service

Incident debrief facilitation
+£2,000

A structured debrief with business, technology, and risk stakeholders that captures lessons learned and embeds them in the firm’s governance documentation, suitable for regulatory disclosure and directly informing the firm’s Agentic AI Governance Design.

Navigate Services

Template Agentic Risk Appetite and Adoption Strategy download

Fill in this form and get access to our
Template Agentic Risk Appetite and Adoption Strategy for free

Agentic AI Risk Appetite Statement and Adoption Strategy

Enterprise-Wide Agentic AI Controls Framework

Fill in this form and get access to the
Enterprise-Wide Agentic AI Controls Framework.

Subscribe to our newsletter

Fill in this form and stay up to date

Get in touch