AI Advisory Services, Readiness Reviews and Governance Support for Regulated Teams.
FM Doctor provides AI advisory services for operational and leadership teams in regulated environments. The work helps you make sense of AI in the real world. The work is designed to surface constraints early (data, governance, capability, time) and support informed decisions — without hype, overreach, or “tool-first” thinking.
A quick sense-check before we scope anything.
Good fit if you...
- Lead or support regulated operations
- Need defensible decisions on AI use, risk, and governance
- Want proportionate next steps (not a big programme)
Not a fit if you want...
- “Build us an AI system” implementation or delivery
- Certification / compliance sign-off
- Hype projects or governance-optional approaches
AI readiness before formal rollout
A regulated team is under pressure to “do something with AI”, but use is already happening informally and leadership does not yet have a clear position on ownership, approved tools, data boundaries, or escalation.
FM Doctor’s role: FM Doctor helps create an early view of readiness before organisations commit to programmes, suppliers, or ambitious use cases. That includes surfacing shadow use, clarifying where governance is likely to fail in practice, and identifying low-risk starting points.
- A structured view of current AI use and ambiguity
- The main governance, policy, and operating gaps
- Practical guardrails for safer use
- A prioritised next-step path for leadership
These are illustrative scenarios showing the kinds of challenges FM Doctor is designed to support.
Core Services
Indicative pricing is shown on each card.
Final price confirmed after 15–30 mins light scoping (usually by email).
Prices exclude VAT.
AI Readiness Review
Price guide: from £850 ex VAT
A proportionate, clarity-first review to establish your baseline: what's happening, what constraints are real, and what a sensible next step looks like.
Method: built on NIST AI RMF, interpreted for UK regulated environments using the UK’s cross-sector AI regulatory principles and ICO guidance, with reference to the NIST Generative AI Profile where relevant, and informed by ISO/IEC 42001, ISO/IEC 23894, and OECD trustworthy AI principles, taking account of emerging regulatory regimes such as the EU AI Act where relevant.
- Short intake + targeted pre-work
- High-level readiness + risk view
- Optional readiness heatmap and scored review summary (where useful)
- Practical recommendations and a Now / Next / Later path
Any heatmap/scoring output is decision support from the review to clarify priorities and next steps, not a compliance rating or certification outcome.
Best for: early stage, unclear direction, leadership pressure to "do something".
Typical turnaround: 5–7 working days (from completed pre-work)
Your time required: 15–30 mins stakeholder time + questionnaire (and any key documents you can securely share)
Designed to be lightweight: one short call (or email-only if preferred) + pre-work. No long discovery phase.
Explore the AI Readiness ReviewAI Governance & Guardrails Review
Price guide: from £1,250 ex VAT (scoped quote after pre-work)
A focused review where the main concern is exposure: policy gaps, shadow use, data handling risk, and loss of control.
- Reality check: behaviour vs policy
- Risk posture and immediate gaps
- Defensible options: minimum / sensible / stronger
Best for: AI already happening, IG concern, need clarity fast.
Typical turnaround: 7–10 working days (from completed pre-work)
Your time required: 30–60 mins stakeholder time + questionnaire (and relevant policy/process documents you can securely share)
Designed to stay focused: typically 1–2 short stakeholder sessions + pre-work and document review.
Explore the AI Governance & Guardrails ReviewFull AI Readiness Assessment Report
Price guide: from £2,750 ex VAT (scoped quote after pre-work)
A deeper assessment for organisations that need leadership-grade clarity, risk visibility, and an advisory roadmap.
- Structured stakeholder conversations
- Assessment across agreed focus areas
- Risks, guardrails, priorities, and recommendations
Best for: active AI use, scrutiny likely, need a robust position.
Typical turnaround: 10–15 working days (from completed pre-work and stakeholder availability)
Your time required: 2–4 hours total across stakeholders + questionnaire (and key evidence/policy docs)
Designed for depth where needed: multiple stakeholder conversations with practical outputs for leadership decisions.
Explore the Full AI Readiness Assessment
Structured outputs leaders can stand behind
You’ll get a structured output leaders can stand behind. View a composite sample from a real report.
Composite sample. No client data.
See the AI Readiness Review sample output- Practical quick wins for governance and early action
- Ideal when budget or time is limited
How it typically works
If there’s a fit, the process stays simple: gather context, clarify scope, then deliver something for your context that will meaningfully support next steps with AI.
Questionnaire
Workshops
Workshops are available where teams need shared understanding, alignment, or sense-making to move forward safely. These are not generic training sessions — they are structured conversations designed to reduce ambiguity and support decisions.
Readiness reviews from £850 ex VAT | Workshops from £395 ex VAT
By contacting FM Doctor, your details will be used only to respond to your enquiry.
FAQ
What do you need from us (time + people)?
A sponsor who owns the outcome, plus 2-6 people who understand day-to-day reality (operations, estates, IT/IG, governance - as relevant).
For a Readiness Review, this is usually 15-30 minutes of stakeholder time, plus a short questionnaire and any existing docs you already have.
How quickly can you deliver?
The Readiness Review is typically 5-7 working days from kick-off, assuming stakeholder availability and timely access to basic context (policies, examples, current concerns).
If there is a deadline, we can run a narrower, accelerated version - with scope kept tight.
Do you use AI tools when producing outputs?
Sometimes - to speed up drafting, summarising, or structuring. But deliverables are human-reviewed and accountability-led.
Nothing is accepted "because the tool said so". If you prefer, we can agree an AI-restricted approach.
How do you avoid AI theatre?
By staying method-first, not tool-first. We start with your operating reality, then test claims against evidence (documents, process, risk context, and stakeholder input).
We make constraints explicit (data, governance, capability, time) and document decisions, trade-offs, and assumptions so leadership can defend why a route was chosen.
What would make you say “don’t do AI here”?
If the basics are not in place: highly sensitive data with weak controls, no clear ownership/accountability, unclear problem definition, or no realistic capacity to operate safely.
In those cases, the right recommendation may be to pause, tighten governance, or choose a non-AI route until conditions are suitable.
Can you work with sensitive / patient data?
Please do not send it. This work is designed to avoid needing patient-identifiable or sensitive operational data.
If access is genuinely unavoidable, it is only with explicit written arrangements and secure handling - but the default is: redacted, anonymised, or synthetic examples.
Is this consultancy or certification?
Consultancy. Advice-only. Not certification.
You remain responsible for decisions, implementation, and compliance. The output is designed to support defensible decision-making, not act as sign-off.
What do you actually deliver?
A proportionate pack that helps you decide what is viable next, typically including:
- baseline readiness + constraints (data, governance, capability, time)
- a practical risk/guardrails view
- recommendations with a clear Now / Next / Later structure
What happens after the Readiness Review?
Three common routes:
- Run with it using the recommendations (with optional check-in support)
- Workshop(s) to align leaders/teams and agree boundaries
- Full Assessment if you need leadership-grade depth, stronger evidence, and a more robust advisory roadmap
We leave your team with capability, not dependency.
What framework do you use?
FM Doctor’s method is built on the NIST AI Risk Management Framework, with reference to the NIST Generative AI Profile where relevant.
It is interpreted for UK regulated environments using the UK’s cross-sector AI regulatory principles and ICO guidance, and informed by international standards including ISO/IEC 42001, ISO/IEC 23894, and the OECD trustworthy AI principles, taking account of emerging regulatory regimes such as the EU AI Act where relevant.
Are you ISO certified?
No. FM Doctor is advice-only and does not certify organisations.
For mature organisations, support can include a roadmap towards management system controls aligned to those standards. Implementation and any certification are separate.