LEXINGTON, Ky. – Dean Dorton announced its new AI Security Governance service, designed to help organizations manage the cybersecurity, compliance, and operational risks that come with AI.
For many businesses, AI has arrived faster than the policies and protections meant to guide it. Without clear ownership and the right safeguards, organizations can face data privacy concerns, unapproved AI tools, and evolving regulatory risk.
“AI is opening real doors for our clients, and we want them to walk through with their eyes open,” said Gui Cozzi, Cybersecurity Risk & Compliance Director at Dean Dorton. “This service helps put the right structure, accountability, and security controls in place so organizations can use AI responsibly.”
What the Service Includes
Through a four-phase engagement, Dean Dorton helps organizations assess current practices, build governance frameworks, test technical controls, and plan for ongoing risk management. The service covers:
- AI Governance: Clear accountability, decision-making authority, and guiding principles
- Acceptable Use Policies: Approved tools, data handling requirements, and employee responsibilities
- Vendor Risk Management: Security and privacy reviews of third-party AI providers
- AI Risk Assessments: Risk evaluation using the NIST AI Risk Management Framework
- LLM Penetration Testing: Testing for prompt injection, data leakage, and model misuse
- Infrastructure and Controls Assessment: Review of permissions, safeguards, and logging
The service builds on Dean Dorton’s cybersecurity risk and compliance practice. The firm has also expanded its Cybersecurity Scorecard to include unauthorized AI agent detection, giving organizations greater visibility into their security posture.
AI will move fast. Governance must move first.
To learn more, contact Dean Dorton’s Cybersecurity Risk & Compliance team.
Learn More About AI Security Governance
