The regulations are in force.
Is your organisation ready?
MeasurementPros assesses, implements, and audits AI and data governance programmes — for the EU AI Act, DORA, CMMC, ISO 42001, and NY Local Law 144. We build compliance that holds up under scrutiny.
Assess. Implement. Audit.
Three verbs. That is the entirety of what serious GRC work requires — and what most advisors only do one of. We do all three, at the control level, with documentation that holds up when a regulator or certification body arrives.
Assess
Gap analysis against ISO 42001, EU AI Act, DORA, CMMC or NY LL144. We map your current posture, identify what's missing, and produce a prioritised remediation roadmap — not a list of things you already knew.
Implement
We build the controls, policies, and procedures that the standard requires. Implementation means documentation that works, not a policy document filed and forgotten. We operate at the control level, not the summary level.
Audit
Our team carries Certified Lead Auditor credentials across ISO 42001, 27001 and 27701. We conduct internal audits, prepare organisations for certification body assessment, and provide independent verification of AI systems.
Regulations we work in every day.
We are not generalists who added an AI practice. Each of these frameworks is primary work for us, running in parallel across our client base.
ISO/IEC 42001 — AI Management Systems
The international standard for AI governance and the foundation that every other AI regulation maps to. We implement at the control level and prepare for certification.
ISO 42001 services →EU AI Act & prEN 18286
High-risk obligations entered application August 2026. We work at the prEN 18286 harmonized standard level — the most defensible path to conformity assessment and CE marking.
EU AI Act services →DORA — Digital Operational Resilience
For fund managers, banks, and insurers under DORA. ICT risk management, third-party oversight, incident reporting, and the Register of Information.
DORA services →CMMC — Cybersecurity Maturity Model
For US defense contractors and their supply chains. We assess against CMMC Level 2 and Level 3, implement required controls, and prepare for C3PAO assessment.
CMMC services →NY Local Law 144
For employers using automated employment decision tools in New York City. Independent bias audits and compliance documentation for AEDT use in hiring and promotion.
LL144 enquiry →AI & Algorithmic Auditing
Independent verification of AI systems, model vetting, output audits, and data governance reviews. Our measurement background makes us unusually credible at the technical level.
Audit enquiry →Three standards. One governance posture.
Organisations that achieve all three of these ISO certifications have the most defensible position against current and emerging data, privacy, and AI regulations globally. We implement and audit across all three.
Privacy
Extension to ISO 27001 for privacy information management. Maps directly to GDPR obligations and demonstrates structured privacy governance to regulators and partners.
Cybersecurity
The internationally recognised information security management system standard. Foundation for DORA ICT requirements, CMMC alignment, and supply chain trust.
Artificial Intelligence
The first international AI management system standard. The explicit foundation of prEN 18286 and the EU AI Act's harmonized compliance architecture.
Positioning for independent AI verification.
Across the United States, state legislatures are establishing formal frameworks for independent AI verification — third-party organisations authorised to assess AI systems for risk, bias, and regulatory conformity. California's SB 813 created the first state-level Independent Verification Organisation designation. Similar frameworks are being watched and debated in other jurisdictions.
MeasurementPros is tracking these developments closely. Our credentials, our technical depth in AI governance, and our existing audit practice across ISO 42001, NY Local Law 144, and the EU AI Act put us in a natural position as these frameworks mature. We are building toward independent verification capability — the infrastructure, the independence standards, the assessment methodology — so that when designation pathways open, we are ready.
If you are a business that will need independent AI verification as these requirements take shape, we are worth talking to now.
Practitioners, not presenters.
Our team operates across GRC, analytics, and AI governance every day. When you engage MeasurementPros, you work directly with the people who have the credentials — not a junior consultant supervised from a distance.
John Smutniak, FHCA
An expert data wrangler with a passion for client performance, John has spent decades solving quantitative business problems and advising performance-driven organisations on implementation and strategy. BS, Massachusetts Institute of Technology.
Leah Kingsbury
Leah leads the effort to make sure clients see benefits fast. Based in Austin, she works across verticals and ensures the client journey is smooth, clear, and results-driven.
Scott Reid
Scott lives for creating quantifiable value by uncovering and presenting actionable insights that empower clients to make better decisions faster and more accurately. MBA, F.W. Olin School of Business at Babson College. BS, University of New Hampshire.
Mira Tekelova
Mira assists with all aspects of delivery — from deep dives into client data to setting up and monitoring complex analytics accounts. A master of many quantitative disciplines.
Michal Tekel
Michal works within our Analytics Operations centre, connecting clients with solutions on a timely and often urgent basis. Deeply schooled in the architectures of ecommerce and direct response datastreams.
Let's talk about your compliance programme.
Start with a conversation.
Whether you're at the assessment stage, mid-implementation, or preparing for certification — we'll tell you clearly where you stand and what a realistic next step looks like. No sales pitch, no proposal for a six-month engagement before we've had a conversation.