AI Risk Assessment for Lafayette and Baton Rouge Businesses

Two levels of assessment

Level 1: The free AI Risk Score (about 5 minutes)

Sixteen questions about how your company uses technology and AI. You receive:

• A Cyber Risk Score
• An AI Readiness letter grade
• An estimated dollar exposure
• A 30/60/90-day roadmap of what to fix and in what order

A senior member of our team reviews every report personally, and it is delivered within one business day. There is no cost and no obligation.

Level 2: The full AI risk assessment

For companies that need evidence, not just a score. This is the starting point when an insurer, auditor, examiner or client asks how you control AI. It covers:

1. AI tool inventory. Shadow AI detection to identify every AI tool in use, including free accounts, browser extensions, AI note-takers and AI features inside software you already license.
2. Data flow review. Which categories of data are going into which tools, and under what terms. We look at whether those tools retain prompts, use them for model training or share them with third parties.
3. Obligation mapping. We compare current AI use against the rules you already answer to, such as HIPAA, the FTC Safeguards Rule, CMMC, bank examiner expectations, attorney confidentiality duties and client contracts.
4. Control review. Account management, multi-factor authentication, data-retention settings, access permissions and logging in the AI tools you use, plus the security of the systems those tools connect to, such as Microsoft 365 and file shares.
5. Policy and training gaps. Whether a written AI policy exists, whether staff have acknowledged it and whether training has been delivered and recorded.
6. Vendor risk. A review of the AI vendors you rely on and the terms that govern your data.

You receive a written report that ranks each risk by likelihood and impact, with a remediation plan you can hand to your team, or to us.

What we look at that others miss

• AI features you did not choose. Many business applications have added AI assistants that may be on by default. We check them.
• Meeting recorders and note-takers. These often store full transcripts of client, patient or board conversations with a third party.
• Connected AI. Tools that connect to email, calendars and file storage can see far more than what a user types. We review what they can reach.
• AI-assisted phishing. Attackers use AI to write convincing messages. We check whether your email protection and staff training account for it.

Who this is for

Lafayette and Baton Rouge businesses with roughly 10 to 200 employees, particularly CPA firms, medical and dental practices, law firms, banks and credit unions, and oil and gas service companies. If your business has a regulator, an auditor, a cyber insurer or demanding clients, you need to know your AI risk.

Frequently Asked Questions