AI Review
An independent review of AI tools and models already in use: how each was approved, what data it can reach, how its output is checked, and who is accountable for it.
Focused Reviews, Assessments & Trainings for the risks in front of you
Offered by Periscope Advisory Group, PLLC
Partner-led reviews, assessments, testing, and training across artificial intelligence, privacy, cybersecurity, controls, and audit oversight. Each engagement starts with a clear scope, timeline, and proposal built around your organization.
Download PDF
One-page summary (PDF, 180 KB)
17 offerings in six areas
Select an area to see what each engagement covers.
013 offerings
AI Governance & Readiness
Know where AI is used, what it touches, and whether the oversight around it holds up.
- AI Review
- AI Readiness
- AI Risk Assessment
Data Governance & Privacy
Understand the personal information you hold and test your program against the rules that apply to it.
- Data Governance & Privacy
- California Consumer Privacy Act Assessment
- GLBA Assessment
Cybersecurity Testing
Find exposures the way an attacker would and confirm your people and cloud controls stop them.
- Cloud Security
- Social Engineering
- Vulnerability Scanning and Assessment
Risk Assessments
A documented, defensible view of technology risk to guide the audit plan and board oversight.
- Cybersecurity Risk Assessment
- IT Audit Risk Assessment
Controls, Access & Fraud
Design controls that work in practice, confirm the right access, and prepare for fraud before it happens.
- Process Risk & Control Design
- User Access Review
- Fraud Readiness
Training & Workshops
Hands-on sessions that build skills for audit teams and the committees that oversee them.
- Copilot Auditor Training
- AI Workshop for Auditors
- Audit/Supervisory Committee Internal Audit Training
Area 01 of 06
AI Governance & Readiness
Artificial intelligence is arriving through vendors, productivity tools, and staff experimentation. We help you see where it is in use, prepare for responsible adoption, and give the board a clear view of the risk.
AI Readiness
A practical look at governance, policy, data, and staff skills before you adopt or expand AI, ending with a prioritized path to responsible use.
AI Risk Assessment
Identify and rate AI-related risks across use cases, vendors, and data flows so management and the board can set the right level of oversight.
Area 02 of 06
Data Governance & Privacy
Privacy obligations depend on what data you collect, where it lives, and who you share it with. We assess the program behind that data and the specific laws your organization answers to.
Data Governance & Privacy
A review of data ownership, classification, retention, and handling practices against your policies and legal obligations.
California Consumer Privacy Act (CCPA) Assessment
An evaluation of how California residents’ personal information is handled, including notices, consumer requests, service-provider terms, and the exemptions that apply to you.
GLBA Assessment
Testing of your information security program and privacy notices against the Gramm-Leach-Bliley Act Safeguards and Privacy Rules.
Area 03 of 06
Cybersecurity Testing
Technical testing shows how your defenses perform, not just how they are documented. Results come with validated findings, plain-language context, and remediation priorities.
Cloud Security
A review of cloud configuration, identity and access, logging, and the controls you own under the shared-responsibility model.
Social Engineering
Phishing, pretext calling, and related exercises that measure how staff respond and show where training should focus.
Vulnerability Scanning and Assessment
Internal and external scanning with validated, risk-ranked findings and practical remediation guidance.
Area 04 of 06
Risk Assessments
A sound risk assessment decides where audit time goes. We build assessments you can explain to examiners and update each year as your environment changes.
Cybersecurity Risk Assessment
An evaluation of threats, controls, and inherent and residual risk across your environment, aligned to recognized frameworks such as the NIST Cybersecurity Framework.
IT Audit Risk Assessment
A ranking of technology areas by risk that supports a multi-year IT audit plan, putting coverage where it matters most.
Area 05 of 06
Controls, Access & Fraud
Strong controls are simple to run and easy to evidence. We help you design them, confirm that system access follows job duties, and get ahead of fraud.
Process Risk & Control Design
Walk through key processes, map the risks, and design or improve controls that are practical to operate and straightforward to test.
User Access Review
Validation that access to critical systems matches job responsibilities, with appropriate separation of duties and timely removal.
Fraud Readiness
An assessment of fraud risk, prevention, detection, and response so your organization is prepared to stop fraud and act quickly when it occurs.
Area 06 of 06
Training & Workshops
Practical training led by practicing auditors, tailored to your team’s experience and the tools you actually use.
Copilot Auditor Training
Hands-on training for auditors using Microsoft Copilot in planning, testing, and reporting, with the guardrails needed to use it well.
AI Workshop for Auditors
An interactive workshop on how AI works, where it creates risk, and how to plan and perform audits of AI.
Audit/Supervisory Committee Internal Audit Training
Training for audit and supervisory committee members on internal audit oversight: roles, reporting, and the questions to ask.
Not sure where to start?
Tell us what is on your mind. A partner will recommend the engagement, or combination, that fits your risks and timeline.
Start a conversation- Jason Brett, CPA, CISA, CITP [email protected]
- Brody Ledbetter, CPA, CISA, CRCM [email protected]