Assent Risk Management likes to be at the forefront of developments in international standards, consulting and auditing, so we did not shy away from Artificial Intelligence when it became more widely available. However as a responsible consultancy practice we recognised both the opportunities and the risks involved with AI tools, and quickly developed a policy to support this. Now, with the international standard for AI Management, ISO 42001, we are also helping our client use AI ethically and safely.
Here we look at our own use of AI and how we are using it to help our clients, which ever standards they are working to.
Benefits and Uses of AI Tools in ISO Consultancy
Here are some use-cases for AI Tools within consultancy:
- Generate or edit generic-content within policies, procedures and templates.
- Produce bespoke illustrations or videos of a scenario, without the need to include personal data (for example to illustrate a health & safety near-miss event).
- Chat-bots to direct users to relevant knowledge base articles and other Assent content.
- To triage and route tickets in our ISO Help Desk.
- Summarise meeting notes (with express permission of the participants).
- Analyse anonymous data to provide industry insights.
- Test a business disruption or model without impacting the business.
Prohibited Uses of AI Tools
Our “Use of Artificial Intelligence Policy” is also clear in the prohibited uses.
- We will not input a client’s data into an AI system for processing.
- Any AI Output MUST be Edited by Humans.
- AI Output must be Fact-Checked to ensure it references current data.
Our AI Use Principles
In brief, our policy sets out the following principles:
- Ethical use.
- Data Privacy.
- Transparency.
- Human Post-Editing.
- Testing & Monitoring.
Summary
AI tools are developing quickly with many being embedded into existing software such as Microsoft Office. We recognise that embracing these tools can have a positive impact on our clients and speed up the delivery of projects. However the risks or misprocessing and misuse become greater due to AIs ability to process on a large scale. So we have implemented controls to mitigate this including a Human Post-Editing requirement.
There are also bespoke AI tools available to support organisations risk management and other compliance needs. Our consultants have broad experience in the compliance software market and can provide you with impartial advice on tools that may suit your needs.
