SearchSubscribe

P.K. SHARMA

Cyber security intelligence, AI governance, practitioner analysis

Where my experience sits.

The areas I have worked in hands-on, and write about here.

Core areas

AI strategyAI strategy and adoptionWorking out which AI systems and agents an organisation actually needs, and how to adopt them safely under NIST AI RMF, the EU AI Act, and the UK's principles-based approach.Read more →
StandardsISO/IEC 27001 implementation and remediationISO/IEC 27001 gap analysis, ISMS implementation, audit remediation and internal audit, as a Lead Auditor.Read more →
StandardsISO/IEC 42001 implementation and remediationISO/IEC 42001 gap analysis, AI management system implementation, remediation and pre-audit review, from first inventory to certification, as an ISO/IEC 42001 Lead Auditor.Read more →
AI securityAI security assessmentThreat modelling, architecture review and adversarial testing of AI systems, mapped to the OWASP LLM Top 10, MITRE ATLAS and NIST AI RMF.Read more →
TrainingCyber security trainingTraining grounded in real delivery: one-to-one CISM and CCISO exam coaching, ISO/IEC 42001 practitioner workshops, and hands-on AI risk training for technical teams.Read more →
Free adviceCareer advice and road mapsFree advice for anyone building a career in IT, cyber security, AI, GRC or penetration testing. Ask, and I will help: what each road is actually like, which one fits you, and what the next step on it is.Read more →

Specialist areas

Narrower areas where I have direct delivery experience.

AI Security and Governance

Assessment, adversarial testing, and governance for AI systems: from agent least-privilege reviews to the EU AI Act.

Cyber Security Leadership

Embedded vCISO leadership and incident readiness: board-level direction, and response plans tested before they are needed.

Compliance and Assurance

Internal audit and third-party assurance that covers AI suppliers properly, as a Lead Auditor.