Build AI Governance your organisation can trust.
Practical AI governance, risk management and implementation for regulated organisations across the UK and Europe.
Farman AI Governance is a boutique, senior practitioner-led AI governance consultancy that helps organisations establish the accountability, risk processes, controls and evidence needed to adopt AI responsibly and defensibly.
Aligned with ISO/IEC 42001, ISO/IEC 23894 and relevant UK and European requirements.
The challenge
AI adoption is moving faster than governance capability.
Organisations are adopting AI across business processes, products and services. But many are doing so without a clear inventory of their AI systems, defined accountability, proportionate risk assessment, or evidence that governance works in practice.
The consequences can include:
Unclear ownership and decision rights.
Unidentified or poorly understood AI risks.
Gaps between policy and operational practice.
Unrealised impact and misspent budget.
Weak oversight of third-party AI systems.
Delayed or unsuccessful implementation.
Difficulty demonstrating readiness to boards, auditors, regulators or customers.
Reputational damage, financial loss, discriminatory outcomes, or harm to the people AI decisions affect.
Farman helps organisations move from intention to implementation.
What we help establish
Our work connects executive accountability with the technical and operational reality of how AI is built, procured, deployed, monitored and retired.
We help organisations establish:
Clear AI governance roles, responsibilities and decision rights.
An accurate inventory of AI systems and use cases.
A working AI risk register.
Proportionate AI risk and impact assessment.
Policies, procedures and operational controls.
Regulatory and audit evidence for internal oversight and external scrutiny.
Practical implementation roadmaps.
Sustainable capability for ongoing AI governance.
Our Service Portfolio
Farman provides standalone engagements and wider programmes across four stages of the AI governance journey.
Start with clarity
Board & Executive Briefing
Structured decision-support sessions for boards and executive teams navigating AI governance, risk and regulatory questions.
These briefings are tailored to your organisation's AI exposure and operating context. They help decision-makers understand their responsibilities, ask the right questions, and determine what governance capability is needed
Build the system
AI Risk & Impact Assessment
A structured assessment of the risks and impacts associated with your organisation's AI estate, including in-house systems, third-party services and unmanaged AI use.
The output informs your AI risk register, control selection and wider AI Management System.
EU AI Act Readiness
Practical preparation for obligations under the EU AI Act, including AI system classification, high-risk assessment, conformity-assessment planning and supporting documentation.
This service can be delivered independently or alongside ISO/IEC 42001 implementation.
ISO/IEC 42001 Audit Preparation
A pre-certification review covering documentation, evidence and implementation against ISO/IEC 42001 requirements.
The engagement includes interview preparation, a mock audit, identification of remaining gaps and a prioritised remediation plan.
AI Governance Advisory
Ongoing advisory support for organisations operating an AI Management System.
A monthly engagement typically include governance oversight, AI risk-posture reviews, regulatory horizon scanning, troubleshooting between reviews and periodic reporting on emerging risks and recommended adjustments.
AIMS Design & Implementation
End-to-end design and implementation of an AI Management System aligned with ISO/IEC 42001.
The work may include governance framework design, policy and procedure development, risk-management processes, control implementation, documentation and internal training. Delivery is structured to support subsequent independent audit and external certification.
AI Governance Gap Assessment
A structured assessment of your organisation's current AI governance capability against ISO/IEC 42001 and, where relevant, applicable EU AI Act obligations.
You receive a current-state gap analysis, capability and role map, and phased implementation roadmap with sequencing, dependencies and effort estimates.
Operating Model & Role Design
Design of the roles, responsibilities, accountabilities and capabilities required to operate AI governance effectively.
Deliverables include an operating-model diagram, RACI matrix, role definitions, capability-gap analysis and recommendations for hiring or reassignment.
Prepare for scrutiny
Independent AI Internal Audit
An independent internal audit of an existing AI Management System, conducted against the internal-audit requirements of ISO/IEC 42001.
To protect auditor independence, Farman does not conduct internal audits of AI Management Systems it has designed or built. This service is available to organisations whose system was implemented by another party.
Keep governance current
Why Farman
AI Governance grounded in technical reality.
Farman was founded by Dr Avazeh Ghanbarian, an AI governance and risk specialist with more than two decades of experience across artificial intelligence, data science, research, healthcare, government and industry. She is the author of AI Risk: Build, Govern, Assure, a practical guide to AI risk management grounded in ISO/IEC 23894.
What that means for the organisations Farman works with :
Full-journey coverage. Nine AI governance services spanning board briefing, ISO/IEC 42001 implementation, EU AI Act readiness, audit preparation, independent internal audit, and ongoing advisory.
Grounded in published methodology. Farman's AI risk management approach draws on Dr Ghanbarian's book on ISO/IEC 23894 and structured application of ISO/IEC 42001, not internal proprietary frameworks.
Vendor-neutral and platform-independent. No tooling lock-in, no partner commissions, no assurance-body affiliations. AI governance recommendations reflect your organisation's context, not a commercial arrangement.
Senior-led AI governance delivery. Dr Ghanbarian works directly on every engagement. No handover to junior consultants.
Designed to integrate. Farman's AI Management System implementations work alongside the management systems you already run, including ISO/IEC 27001, ISO 9001 and ISO 13485, rather than duplicating structures or documentation.
[About Dr Ghanbarian and Farman →]
How we work
From boardroom to build.
Effective AI governance must work at every level of an organisation. It must give boards confidence that risks are understood and controlled, while giving technical and operational teams processes they can actually use.
Farman's work is guided by a simple principle:
Never state anything to a board that could not also be made sense of by the engineer building it; and never tell an engineer anything you would not be prepared to defend in front of the board.
Our work is grounded in:
ISO/IEC 42001 and its AI Management System requirements.
ISO/IEC 23894 and structured AI risk-management practice.
Applicable UK and European regulatory expectations.
The practical realities of building, procuring, deploying and operating AI.
Clear evidence, defined accountability and proportionate controls.
We are deliberately independent. Farman does not audit AI Management Systems that it has designed or built.
Start with a focused conversation
Not sure where your organisation stands?
You may already have AI policies, risk processes or management systems in place — or you may be starting from the beginning.
An initial conversation can help identify:
Your organisation's current AI governance position.
The most significant gaps or uncertainties.
The appropriate starting engagement.
The practical next steps for your organisation.