AI Governance & Regulatory Readiness
EU AI Act classification, NIST AI RMF, model documentation, conformity pathway.
A structured, evidence-first assessment of investment targets: AI governance, cybersecurity, threat history, crown jewel assets, supply chain, operating model, financial exposure and physical security, scored, red-flagged and priced for an investment committee.
Attackers exploit the seams between teams and technologies, so the Index audits the whole estate, digital and physical, as one connected system: IT, OT, IoT, the AI and data estate, sites, hardware and people.
EU AI Act classification, NIST AI RMF, model documentation, conformity pathway.
NIST CSF 2.0 end to end: govern, identify, protect, detect, respond, recover, patch.
Breach history, ransomware record, dark web exposure, testing discipline.
Model weights, training data rights, IP chain of title, insider risk, DPO and GDPR roles.
Concentration risk, AI-BOM, licence contamination, contract protections.
Leadership, RACI, key-person risk, budget adequacy, enterprise risk governance.
Insurance warranties, indemnity exposure, regulatory penalties, revenue at risk.
Sites, OT and IoT, media and paper disposal, bug sweeps, converged governance.
Company profile, certifications, senior leadership, and a full respondent log: who answered, their role, and when. Every finding carries provenance.
Five-point maturity per control, N/A only with a recorded reason, and asserted controls without evidence score as though they do not exist.
A single disqualifying fact, an undisclosed breach, contested training data, uncapped indemnities, forces the tier down regardless of average maturity.
The questions no scanner asks: how easy would it be to breach this company, from the people who know, and what would the adversary do?
The Loginov Index was developed by Michael J. Loginov from more than thirty years of executive security leadership: sixteen security leadership mandates at CISO level and above, over one hundred board and audit committee briefings, and cyber due diligence practice across private equity transactions. The methodology, training programme and consultant certification are delivered through MichaelLoginov.com.
Delivery is by trained, named consultants under written terms; access is individual, revocable, and tied to completion of the consultant training programme. A five day assignment, subject to client-side interviewee availability.