Alset Advisory Now Covers AI Value and AI Compliance, with TheDex

Two questions every board now asks about AI

When we started Alset Advisory Services, the question we were asked most was about money. Where is AI paying off in our company, and where is it costing us? We built the Value Realization Framework and the risk-adjusted AI P&L to answer it.

Over the last few months a second question has come up just as often. Is our AI safe, and can we show it? Customers ask it in security reviews. Auditors ask it. If your AI is used in the EU, the AI Act now expects your staff to be AI literate, and stricter rules for high-risk AI, such as AI that screens job applicants, apply from 02-Dec-2027.

These two questions are usually handled by different people. Finance and strategy teams look at the value. Compliance, risk and security teams look at the risk. We think that split is a mistake. A biased hiring screen, a help assistant that can be tricked into breaking its rules or a missing audit record is a real cost, and it belongs in the same numbers as the gains. So we have brought both questions into one offering.

AI value

The first practice is the one we started with. We score your company across six areas of AI maturity, agree financial goals for the next quarter, the next year and beyond, choose the AI uses worth doing and track net AI value as you go.

The important word is net. Most AI business cases add up the time AI saves and subtract what it costs to run. They leave out a third line, which we call the risk drag: the time spent checking and fixing AI mistakes, the compliance, legal and security exposure, and the AI licences people pay for but do not use. We subtract it, so the number you report is one your finance team can defend.

AI compliance

The second practice is new. It covers three kinds of work:

Each piece of work feeds the first practice. Every risk you remove shrinks the drag, so governance shows up as value as well as cost.

Why we partnered with TheDex

Advice on compliance is only useful if the evidence keeps up. Most companies collect their compliance evidence in a rush before each audit, from screenshots, spreadsheets and memory. By the next audit it is out of date again.

TheDex is an AI-native platform that reads the logs your systems already produce, from firewalls, identity, mail and business applications to the AI agents themselves, and holds them in one connected record. Its compliance view turns that record into GRC workflows:

TheDex already runs these workflows for the HIPAA Security Rule and NIST. They extend to the EU AI Act and ISO/IEC 42001, and ISO/IEC 27001 is coming soon.

With the partnership, the governance we design with you does not stay in a document. Its controls, owners and reviews go into TheDex, and the evidence stays up to date between audits.

Where Alset's courses fit

The third part is the people. Our recommendations become training paths on Alset, one for each role. Our AI ethics, security and compliance courses cover AI ethics and bias, the EU AI Act, ISO/IEC 42001, AI governance, prompt injection, guardrails and AI testing. Your people do the work themselves on realistic practice files, which gives your teams the AI literacy the EU AI Act expects, with work they can show.

So the whole picture fits together:

Who it is for

How to start

The quickest start is the free AI maturity self-assessment. It takes about two minutes and gives you a first view of where your AI value and your AI risk sit.

If you would rather talk it through, book a briefing, or read more about Alset Advisory Services.