Skip to content
Cre8tiveGene
GRC & Compliance

Adopt AI with confidence, and prove it.

We assess how you use AI and technology, close the gaps, and prepare you for certification, so your board and your regulator can see exactly how it is governed.

Book an assessment callTake the readiness check
ISO/IEC 42001ISO/IEC 27001NDPA 2023
Frameworks

The standards and law we work with.

We map how you work today against each requirement, then help you close the distance.

ISO/IEC 42001

AI management systems

The international standard for governing how an organisation develops and uses AI, published in 2023.

ISO/IEC 27001

Information security

The established standard for managing information security risks, and one many banks already build on.

NDPA 2023

Nigeria Data Protection Act

Nigeria's law on how personal data is collected, used, stored and transferred.

Services

Governance you can show, not just say.

Six ways we help, from a first look at the AI you already use to the day your auditor arrives.

  1. 01

    AI governance and risk

    Policies, an inventory of the AI you use, and risk assessments your board can read.

  2. 02

    Technology compliance assessments

    Information-security and technology controls measured against the standards you answer to.

  3. 03

    ISO certification readiness

    Preparation for ISO/IEC 27001 and ISO/IEC 42001 audits: scope, controls, evidence and a readiness review.

  4. 04

    Data protection readiness

    Your obligations under the Nigeria Data Protection Act 2023, mapped to how you actually handle data.

  5. 05

    Policy and control design

    The written policies and working controls that close the gaps we find.

  6. 06

    Audits and gap analyses

    Internal audits, gap reports and remediation roadmaps, with staff training where it helps.

Our method

From first look to audit-ready.

Five stages. You can stop after any one of them and still have something useful.

  1. 01

    Assess

    Interviews, documents and a look at the systems themselves.

  2. 02

    Gap report

    Where you stand against each requirement, in plain language.

  3. 03

    Roadmap

    What to fix, in what order, and who owns it.

  4. 04

    Certification support

    Evidence, internal audit and a readiness review before the certification body arrives.

  5. 05

    Ongoing monitoring

    Regular check-ins so controls keep working after the audit.

Readiness check

How ready is your AI governance? One minute.

Six questions. Your answers stay in your browser; nothing is sent to us.

0 of 6 answered0%
  1. 01Do you keep a list of every AI system your organisation uses or is buying?
  2. 02Does someone senior own the risks of each one?
  3. 03Do you have a written policy on how staff may use AI tools?
  4. 04Have you assessed how your AI systems handle personal data under the NDPA?
  5. 05Does a person review AI output before it affects a customer?
  6. 06Do you review your AI systems on a schedule, not just when something goes wrong?
Who it's for

For anyone who has to answer for their AI.

  • Banks

    Commercial and microfinance banks bringing AI into customer service and operations.

  • Fintechs

    Fast-moving teams that need controls built around what investors and partner banks ask for.

  • Public sector

    Agencies adopting AI for citizen services, with accountability built in.

  • Enterprises

    Organisations with AI spreading across teams and no single view of it yet.

What you receive

Documents your board and regulator can read.

Every engagement ends with written work you keep, not a slide deck that disappears.

Sample documents

Cre8tiveGene · RegisterConfidential

AI inventory

ChatbotCustomer
Fraud modelPayments
Doc readerOperations
Staff assistantInternal
Register

AI inventory

Every AI system you use or are buying, its owner, its data and its risk rating.

Cre8tiveGene · ReportConfidential

Risk assessment

Report

Risk assessment

Each system scored for impact and likelihood, with the controls that bring it down.

Cre8tiveGene · ReportConfidential

Gap report

Report

Gap report

Where you stand against each requirement of the standard, clause by clause.

Cre8tiveGene · PlanConfidential

Remediation roadmap

Q1 · Inventory
Q2 · Policies
Q3 · Controls
Q4 · Audit
Plan

Remediation roadmap

What to fix, in what order, who owns it and when it should be done.

Cre8tiveGene · Document setConfidential

Policies and procedures

Document set

Policies and procedures

The written rules, ready to adopt, that close the gaps we found.

Cre8tiveGene · BriefingConfidential

Board summary

Risks
Controls
Ready
Briefing

Board summary

A short, plain-language view of where you are and what it will take.

Questions

Before you book.

Ask us something else

No. Certification is issued by an accredited certification body. We prepare you for the audit: the gap analysis, the controls, the evidence and a readiness review.