Trust, with a basis.
Control mapping, customer assurance, procurement responses and processor governance.
Domains 1, 4, 8, 9
Technology risk · GRC · AI governance
Governance,
made inspectable.
Controls you can test. Evidence you can trace. Decisions you can explain.
Explore the evidence
Independent work. Explicit assumptions. Inspectable results.
Executive observatory
Read the risk.
Question the evidence.
A working view of the portfolio’s modeled risk register and automated technical checks.
Loading the portfolio register…
- Risk scenarios
- —
- Above modeled appetite
- —
- Control domains
- —
- AI use cases
- —
Inherent risk distribution
Select a cell to inspect its scenarios. Ordinal scores, not predicted financial loss.
Likelihood ↑
Impact → 1 2 3 4 5
Control monitoring
Checking evidence availability…
A passing technical test supports only its stated scope. Missing access is “unknown”; old evidence is “stale”.
Audit follow-up clock
Historical simulation. Days are calculated from the modeled due dates; current closure evidence has not been supplied.
Three disciplines.
One evidence trail.
Ten original project domains, organized around the decisions a security team needs to make.
↗
Oversight, by design.
AI inventory, vendor triage, transparency evidence and local prompt screening.
Domains 2, 3, 6, 7
Evidence, kept current.
Scheduled collectors, explicit findings, freshness checks and executive risk reporting.
Domains 5, 10
A decision you
can interrogate.
Change a vendor intake assertion. Inspect how the recommendation changes. This browser demonstration does not call an AI model.
Recommendation
Awaiting evaluation
- Select the available evidence and evaluate the intake.
Illustrative triage only. An accountable reviewer must verify the evidence and approve the decision.
The person behind the work
Abdullah
Al Owasi.
I work at the intersection of technology risk, security assurance and AI governance.
Based in Petaling Jaya, Malaysia, I’m building independent governance systems that make the reasoning visible: what was tested, what the evidence supports and what still needs a decision.
My portfolio covers fifteen control domains, fifteen AI use cases and ten vendor scenarios. These are work samples, with modeled data and explicit limitations.
Inspect my GitHub ↗Professional profile ↗GRC · Technology risk · AI governance