01
Shadow AI Workforce Exposure Assessment
A focused assessment of how ordinary employees and contractors may be using public AI tools outside sanctioned channels, especially through browsers, personal accounts, BYOD, and personal phones.
What it helps answer
- Are employees already using public AI tools for work?
- Where are personal accounts and unmanaged devices creating blind spots?
- Which user groups and workflows appear highest risk?
- What can the organization actually see today?
- What should happen first?
Typical deliverables
- Findings summary
- Exposure heat map
- Visibility and confidence assessment
- Policy and control gap summary
- 30/60/90-day action plan
Best fit
This service is best for firms that know the issue exists but do not yet have a clear picture of exposure, visibility, or first priorities.
02
Workforce AI Guardrails Pack
A practical set of rules, guidance, and decision boundaries for employee use of public AI tools.
What it helps define
- What ordinary employees may and may not do
- How personal-account use should be handled
- What is acceptable from browsers, unmanaged devices, and personal phones
- Which use cases are approved, restricted, or prohibited
- Where manager review or supervision matters
Typical deliverables
- Workforce AI acceptable use policy
- Public-AI and personal-account standard
- BYOD / personal-device guidance
- Personal-phone AI guidance
- Approved / restricted / prohibited use-case matrix
- Manager FAQ
- Employee quick guide
- Exception process outline
Best fit
This service is best for firms that need practical guardrails and clearer rules, not a broad AI governance program.
03
Unmanaged AI Risk Reduction Sprint
A focused advisory sprint that helps clients move from findings to action by clarifying priorities, sequencing next steps, and defining a workable path forward.
What it helps with
- Prioritizing immediate next steps
- Sequencing policy, visibility, and control work
- Deciding whether to discover, constrain, or contain
- Preparing internal teams or external partners for implementation
- Turning a vague concern into a defined remediation path
Typical deliverables
- Remediation roadmap
- Control-path recommendation
- Implementation considerations summary
- Internal decision brief
- Partner handoff package, if needed
Best fit
This service is best for firms that already understand the problem and need a practical path forward.
04
Workforce AI Control Path Advisory
An optional module for clients that need help evaluating and choosing among practical AI control paths before or after a core engagement.
What it helps with
- Browser-layer visibility and restrictions
- Personal-account restrictions
- Managed mobile workspace patterns
- Secure enterprise browser evaluation for targeted populations
- Contractor-specific containment approaches
Best fit
This module is best for clients that have completed or are mid-engagement and need help navigating vendor options and practical control decisions. NCA does not resell products or provide implementation services — guidance is based on fit, not commercial relationship.
Independent and vendor-neutral, by design.
North Country Advisory does not resell products, earn commissions, or maintain preferred vendor relationships that influence recommendations.
Every engagement is scoped around your actual situation. Guidance on control paths and implementation is based on fit, not commercial relationship.