AI Governance & Landing Zone Assessment
Know exactly where you stand.
In ten business days.
A fixed-scope, fixed-price diagnostic that gives you a CAF/WAF scorecard, a data posture report, and a clear remediation plan — before you commit to anything else. The technical justification for your next AI infrastructure investment.
Book the assessment — fixed priceWhat the assessment covers
Two weeks. Four domains. One executive scorecard.
Automated discovery & data posture
- CAF/WAF Landing Zone configuration audit Subscription topology, management groups, policy assignments, Private Link isolation, unencrypted transit paths, broad network peering, and key management risks.
- Copilot & agent data-oversharing scan Exposure mapping of sensitive corporate data accessible to M365 Copilots and ad-hoc agent tools. Tenant-level RBAC gap analysis and unindexed data sprawl.
- Token telemetry & cost leakage analysis Unmanaged API endpoints, token sprawl, and cost-attribution gaps across your Azure OpenAI and AI service estate.
Gap analysis & architecture blueprint
- Zero Trust & private networking evaluation Assessment of your current Zero Trust posture, private endpoint coverage, and network segmentation against NCSC CAF and Azure Landing Zone baselines.
- Deterministic guardrail & policy scoring Evaluation of your existing Azure Policy assignments, Deny and Modify effects, and the gap between your live policy estate and ISO 27001 / ISO 42001 requirements.
- Executive briefing & remediation plan A board-ready risk scorecard and a prioritised technical remediation plan. Clear costing for what it takes to resolve. No obligation to proceed.
The deliverable
Four-domain risk scorecard.
Every finding is categorised, prioritised, and mapped to a remediation cost. You leave with something actionable — not a deck of recommendations.
Cloud Adoption & Well-Architected Framework
Subscription topology, management groups, policy assignments, and Private Link isolation evaluated against CAF 2026 and WAF five-pillar baselines. Unencrypted transit paths, broad network peering, and key management risks surfaced and scored.
Data Posture & Agent Oversharing Risk
Exposure mapping of sensitive corporate data accessible to M365 Copilots and ad-hoc agent tools. Tenant-level RBAC gap analysis, unindexed data sprawl, and SharePoint permission hygiene.
AI Governance & Deterministic Controls
Evaluation of your existing AI guardrails, Azure Policy compliance, and the gap between your live policy estate and ISO 42001 AI governance requirements. Token telemetry, cost leakage, and model deprecation exposure.
Zero Trust & Sovereign Readiness
Zero Trust posture, private endpoint coverage, and network segmentation assessed against NCSC CAF and your target compliance tier — Standard Enterprise, Regulated, or Sovereign/SC-Cleared.
How it works
Delegated access. Zero disruption.
The assessment runs via Azure Lighthouse with delegated read-only access. No agents installed, no credentials shared, no changes made to running workloads.
Delegated access granted
You grant read-only Azure Lighthouse access. Takes 15 minutes. No credentials leave your tenant.
Week 1 — automated scans
CAF/WAF audit, data posture scan, token telemetry analysis. All automated. Zero disruption to running workloads.
Week 2 — expert analysis
Findings reviewed, prioritised, and mapped to remediation options and costs. Architecture blueprint drafted.
Executive briefing
Board-ready scorecard delivered. Remediation plan presented. No obligation to proceed further.
Why start here
The diagnostic is the entry point — not the pitch.
Immediate value regardless of next steps
The scorecard and remediation plan are yours to keep. If you choose to proceed with Talastron Kinetic AI, the diagnostic cost is credited against the first platform build.
The technical justification procurement needs
A board-ready risk scorecard with quantified findings makes internal approval straightforward. No vague consultant recommendations — specific findings, specific costs, specific remediation.
Compressed vs traditional consulting
The equivalent traditional consulting engagement runs 15 to 21 manual days. Automated assessment scripts compress this to 10 business days, fixed price, with more consistent coverage across all four domains.
No obligation to proceed
The diagnostic is a complete, standalone engagement. If Talastron Kinetic AI isn't right for you, the scorecard is still an asset. No pressure, no follow-on sales motion embedded in the work.
Ten business days to a clear picture.
Fixed price. Delegated read-only access. No disruption to running workloads. A board-ready scorecard and remediation plan at the end of it.
Book the assessment See how the assessment leads to Talastron Kinetic AI