FOUNTIUM AI ADVISORY

Advice for adopting AI
and AI agents with confidence

Independent, practical guidance for leadership teams: where AI can add value, which risks to address before deployment, and who is accountable once it is in use.

Start a conversation

ADVISORY SERVICES

Five ways we work with you

AI decisions cut across technology, security, privacy and the business. We bring them together so that adoption, governance and oversight are planned as one program, not separate projects.

01 / ASSESS

AI readiness & due diligence

Make informed adoption decisions

Clarify business value and assess the risks of AI use cases and vendors before committing to a path forward.

  • AI inventory and use-case assessments
  • Vendor due diligence and risk priorities
  • Responsible adoption roadmaps
02 / GOVERN

Governance & accountability

Make ownership explicit

Establish clear responsibility for decisions, approvals and the way people use AI across the organization.

  • Policies, ownership and approval processes
  • Practical staff guidance
  • Documented decisions and review records
03 / REVIEW

AI security & trust assessment

Examine the risks that matter

Assess data handling, privacy, security and reliability, alongside fairness and transparency risks relevant to the use case.

  • Sensitive-information handling and access requirements
  • Privacy, security and reliability risk reviews
  • Risk priorities and proportionate safeguard recommendations
04 / SAFEGUARD

Agentic AI safeguards

Set boundaries for autonomous action

Define what agents can access and do, where human approval is required and how activity can be reviewed or stopped.

  • Permission boundaries and tool-access controls
  • Human approval gates and escalation paths
  • Activity logs and shutdown procedures
05 / REVIEW & IMPROVE

Ongoing oversight

Keep decisions and safeguards current

Plan how to monitor AI activity, reassess changes and report risks so governance remains useful throughout the lifecycle.

  • Monitoring plans and reassessment triggers
  • Incident procedures and review responsibilities
  • Management reporting and evidence review

WAYS TO START

Three fixed-scope ways to begin

Most organizations are at one of three stages, each with a clear starting point. Every engagement is scoped and quoted after a short discovery call. Book a 30-minute call (opens in a new tab)

01 / EXPLORING

AI Readiness & Risk Snapshot

2–3 weeks · Fixed fee

For organizations already using AI, or about to, that need a clear picture before they scale.

A focused assessment of where AI is in use, the risks it creates and what to fix first.

You receive

  • An inventory of AI use, including unapproved “shadow AI” tools
  • A risk heat map covering data, security, privacy and third parties
  • A gap check against NIST AI RMF and ISO/IEC 42001, and whether the EU AI Act applies
  • A prioritized 90-day action plan
  • An executive briefing
Discuss this engagement

02 / FORMALIZING

AI Governance Foundations

6–8 weeks · Fixed fee

For organizations that need governance they can show to boards, regulators and customers.

We design and set up a practical governance framework that fits how you actually work.

You receive

  • An AI policy and acceptable-use standard
  • Roles, decision rights and an AI oversight committee charter
  • An intake and risk-assessment process for new use cases
  • Vendor and model assessment templates
  • A control map to NIST AI RMF, ISO/IEC 42001 and the EU AI Act
  • A working session for leaders and governance owners
Discuss this engagement

03 / SCALING

Fractional AI Governance Lead

Monthly retainer · 3-month minimum

For organizations that need senior AI governance guidance without a full-time hire.

Ongoing senior oversight as AI use grows, including agentic AI and autonomous workflows.

You receive

  • Review and approval support for new AI use cases and vendors
  • Guardrails and oversight design for agentic AI
  • Quarterly board or leadership reporting
  • Updates on regulatory and standards changes and what they mean for you
  • A set number of advisory hours each month, sized to your needs
Discuss this engagement

HOW WE WORK

A practical path forward

  1. 01 / UNDERSTAND

    Start with your context

    Establish the business goal, AI use cases, vendors, data and existing controls.

  2. 02 / PRIORITIZE

    Focus on what matters

    Assess risk priorities and agree proportionate safeguards, decision owners and an adoption roadmap.

  3. 03 / ENABLE

    Put responsibility to work

    Support documented decisions, operational safeguards and evidence review, with triggers for reassessment.

FRAMEWORKS

Grounded in recognized guidance

  • NIST AI Risk Management Framework
  • ISO/IEC 42001
  • EU AI Act
  • Canada’s Voluntary Code of Conduct for Generative AI

Our advice is aligned with these frameworks. Engaging Fountium does not, by itself, certify compliance with any standard or law.

YOUR ADVISOR

Kay Oloke, PhD, co-founder and principal consultant of Fountium

Kay Oloke, PhD

Co-founder & Principal Consultant, Fountium

Kay helps leadership teams decide where AI can add value, which risks to address before deployment, and who is accountable once it is in use. At Fountium, he advises organizations on AI due diligence, governance, cybersecurity, privacy and the oversight of AI agents.

Kay brings more than 20 years of technology and cybersecurity experience. As Regional Chief Security Officer at Mastercard, his work spanned real-time payments and physical security across the region. That experience shapes a practical approach to AI governance: assess the use case and the vendor, set clear approval criteria, and put safeguards in place that teams can monitor and improve.

Kay holds a PhD in Information Assurance. His doctoral research examined how information security management practices relate to healthcare data breaches, grounding his advice in evidence rather than checklists. His credentials include CISSP, CISM, CCSP and SABSA Chartered Foundation (SCF), alongside AWS Certified AI Practitioner and Microsoft Azure AI Fundamentals. He is based in Toronto.

  • PhD
  • CISSP
  • CISM
  • CCSP
  • SABSA SCF
  • AWS AI Practitioner
  • Azure AI Fundamentals

Connect on LinkedIn (opens in a new tab)

LET’S BUILD TRUST IN AI

Ready to move AI forward responsibly?

Tell us what you are working on. We will suggest a proportionate starting point for your use cases, vendors and agents.

Start a conversation