AI Governance, Security and Compliance Audit
As a Certified Information Systems Auditor, Altius IT's AI Governance Audit reviews the program around your Artificial Intelligence rather than a single application, and whether it meets security and compliance requirements.

Altius IT audits help ensure that your Artificial Intelligence is trustworthy and operate in an accurate, reliable, safe, and non-discriminatory manner. Our project scope includes a review and evaluation of:

Policies, procedures, guidelines, and other controls that maintain the security and privacy of your Artificial Intelligence. These include written documents such as an Information Security Program, Annual Report on the Status of the Information Security Program, Artificial Intelligence Policy, Environmental Social and Governance Policy, Artificial Intelligence training materials, written agreements with Artificial Intelligence service providers, Risk Assessment, and other written documents appropriate to the engagement.
Your AI systems against the requirements specified in the White House AI Bill of Rights - Making Automated Systems Work for the American People.
Your AI program against the requirements of the National Institute of Standards and Technology's Artificial Intelligence Risk Management Framework.
Security controls related to your AI systems

Frameworks We Audit Against
Which of these applies depends on where you operate and what your AI decides. The audit establishes that first, then tests against the ones that bind you:

EU AI Act: risk classification of each system (prohibited, high risk, limited risk, minimal risk), conformity assessment, technical documentation, transparency obligations, human oversight, and post-market monitoring
ISO/IEC 42001, the AI management system standard, and ISO/IEC 23894 for AI risk management
NIST Artificial Intelligence Risk Management Framework and its Generative AI Profile
United States state law, including the Colorado AI Act, California automated decision-making regulations under CCPA/CPRA, and New York City Local Law 144 bias audits for automated employment decision tools
Sector rules where they apply: HIPAA for AI in healthcare, GLBA and SR 11-7 in financial services, FERPA in education, and FDA guidance on AI-enabled medical devices
The security controls around the models themselves, including the data they were trained on, the interfaces they expose, and the service providers behind them

AI Audit Report
Altius IT's AI Governance Audit Report provides specific recommendations and detailed steps to address security vulnerabilities and meet compliance requirements. Our report identifies specific "gaps" and provides instructions to address each security or compliance issue. After delivery of our reports, Altius IT provides three months of free support to answer any questions you may have. This ensures the issues identified in the AI audit are properly mitigated or eliminated.

Certified Auditor Letter
Let your clients and prospects know that your AI is governed and secure. As an IT security audit company with Certified Information Systems Auditors, we provide you with our Auditor Opinion Letter stating your Artificial Intelligence meets security and compliance requirements.

Audit Team
Altius IT provides a certified auditor with each engagement:

Certified Information Systems Auditor
Experienced Project Manager
Senior Security Engineer

Proposal
Our proposal provides you with detailed information so you know exactly how we will help you:

Project scope and list of major project tasks
Pricing options
CV's of our audit and security team members
Security and compliance certification
Why Altius IT

Client Experience
Altius IT works with a diverse number of clients across a wide range of industries. We help organizations of all sizes, from the smallest mom and pop start-up to the world's largest and most recognized names. Our case studies show how we have helped organizations identify, manage, and reduce their risks.

Certified Information Systems Auditors
Unlike a security consultant, Altius IT is certified as a Certified Information Systems Auditor to perform a security audit of your environment and issue reports and recommendations to secure your systems. After your audit, Altius IT's Auditor Opinion Letter and Secure Seal let your clients and prospects know you meet security best practice/compliance requirements.

See our Media page for video clips of our experts as well as over 40 publications featuring Altius IT. In addition to our auditor certifications, we hold many security, technical, and project management credentials. More information is available on our About Us page.

Our comprehensive audit service uncovers gaps in your existing defenses so that you can better:

Fortify your information systems, applications, and network infrastructure
Comply with regulatory requirements
Protect your valuable assets

Network Security Audit Company
Certified security audit
Cybersecurity audit
Network security audit
Penetration test and penetration testing
Ransomware audit and testing
Risk assessment
Security testing
Social engineering security assessment

IT Security Audit Company
Artificial intelligence application audit
Data security audit
IT audit
IT security audit
Mobile software application security audit
Network security assessment
Security assurance
Web application security audit
Website security audit
Website security testing

Compliance Audit Company
Information assurance
Privacy audit
Security compliance

Consulting Services Company
Custom consulting service
Cybersecurity consulting
Network security consulting
Network audit
Network assessment

Proven solutions that deliver value

Trusted
Trusted for over 25 years to provide faster and more accurate diagnosis of security issues. We understand that it’s not what we say, it’s what we find that matters.

Clear Independence
Altius IT has no constricting ties and no conflicts of interest. We are dedicated and responsive to our clients, allowing Altius IT to make recommendations that are aligned with your risk tolerance.

Cost Effective Recommendations
Altius IT’s proprietary services provide a thorough 360 degree review of your risks. Our recommendations provide a clear description of risks found and as well as cost effective steps to secure your systems.

Experienced
We know your industry. Altius IT has over 25 years of security audit experience in every type of industry from small public firms to large government agencies.

Peer Awards and Recognition
Altius IT’s experts are recognized by our peers as leaders in our field. Our staff has been elected by our peers into industry leadership roles and on the Board of Directors of international and national associations.

Best of Breed
Altius IT’s security audit services have been featured in over 40 industry publications. See our Media page.

Highest Caliber Audit Team
Altius IT answers to global certifying bodies so you can be assured that all audits and recommendations are made under the highest level of quality, reliability, and thoroughness.