# Phase 0 — Enterprise AI Risk Assessment

> From $17.5K · AI Security · https://cisomarketplace.services/services/phase-0-enterprise-ai-risk-assessment

The six pillars of the AI security program are not sold off a shelf — they are built into your ecosystem, and that requires knowing the ecosystem first. Phase 0 is a scoped, fixed-fee assessment that maps your environment end to end: every AI system in use (sanctioned and shadow), the DevSecOps reality, the data and identity stack, the SIEM / EDR / tooling landscape, and where testing should start. It defines how each pillar gets built for you (BYOK and open-source first, commercial upgrades where they earn their place), designs the integration seams into what you already run, and plans the deployment topology for distributed sites. The output is the current-state map, the future-state design and a sequenced build plan — and only then does the program get a number. CISO Marketplace members get the Phase 0 fee credited toward the program if they proceed.

## In scope

- AI and security footprint map: sanctioned and shadow AI, data, identity, SIEM / EDR and tooling
- Functional model for each of the six pillars (BYOK and open-source first)
- Integration seams into the platforms and tools you already run
- Deployment topology for distributed sites and segments
- Sequenced, risk-ordered build plan for the pillars

## Deliverables

- Current-state ecosystem map
- Future-state program architecture
- Sequenced build plan with the entry-point pillars
- Executive readout and build vault hand-over

## Tiers

### Essential Phase 0: $17.5K

One business unit or platform, up to ~250 employees, delivered remotely: footprint map, pillar model and sequenced build plan

Limits: employees 250, locations 1

Excludes:
- On-site week
- Sibling entities or additional platforms
- Distributed collection-plane design

### Standard Phase 0: $30K

The standard engagement: 10 business days with week 1 on site, the full ecosystem map, integration seams, deployment topology and the executive readout

Limits: employees 2500, locations 5

Excludes:
- Sibling entities or additional platforms
- Board-level readout

### Enterprise Phase 0: $45K

Multi-site, multi-entity or regulated enterprises: adds sibling entities or platforms, the distributed collection-plane design and a board-level readout

Limits: employees 25000, locations 50

## Terms

Starting price shown is the lowest published tier. A written proposal fixes scope, tier and price before anything is signed. Timeline is set in the SOW.

Scope this engagement: https://cisomarketplace.services/scope?service=phase-0-enterprise-ai-risk-assessment