Engage with Confidence
Who is Next Phase Governance for?
How is Next Phase Governance different from a large consulting firm?
What industries do you work with?
Executive teams at major enterprises navigating AI governance, regulatory compliance, and operational risk — particularly in healthcare, media, and other highly regulated industries.
What does an engagement look like?
Every engagement is led by Yasmin Jones directly. Work is scoped to your organization’s specific regulatory environment, risk profile, and strategic priorities — not templated deliverables.
Which AI regulations do you cover?
EU AI Act, NIST AI RMF, ISO 42001, and applicable U.S. state AI laws. Regulatory monitoring is included in Executive Advisory engagements.
Every engagement is led by Yasmin Jones directly — not delegated to junior staff or managed through account teams. Clients get senior-level attention, work product built for their specific situation, and a principal who is accountable for outcomes.
Healthcare, media, and other highly regulated industries, including organizations subject to federal and state compliance requirements. AI governance engagements span sectors wherever AI adoption is outpacing governance infrastructure.
How do I get started?
The first step is an executive briefing — a direct conversation to discuss your organization’s governance priorities and determine whether an engagement makes sense. No intake forms, no pre-qualification process.
AI Regulation & Compliance
What is the EU AI Act and does it apply to my organization?
The EU AI Act is the world’s first comprehensive legal framework for artificial intelligence, passed in 2024 and taking effect in phases through 2027. It applies to any organization that develops, deploys, or uses AI systems in the European Union — including U.S.-based companies with EU customers, partners, or operations. Obligations vary by risk tier, with the highest requirements applying to AI used in healthcare, employment, critical infrastructure, and other high-risk contexts.
What is the NIST AI Risk Management Framework (AI RMF)?
The NIST AI RMF is a voluntary framework published by the National Institute of Standards and Technology to help organizations identify, assess, and manage AI-related risks. It is organized around four core functions — Govern, Map, Measure, and Manage — and is increasingly referenced by regulators, federal agencies, and enterprise procurement teams as a baseline standard for responsible AI. Many organizations use it as the foundation for their internal AI governance programs.
What U.S. state AI laws should my organization be aware of?
The U.S. AI regulatory landscape is evolving rapidly at the state level. Colorado, Illinois, Texas, and Utah have enacted AI-specific legislation, with dozens of additional states advancing bills targeting algorithmic decision-making, automated employment tools, and AI in healthcare. Organizations operating across multiple states need governance frameworks designed to scale with this regulatory patchwork rather than address each law in isolation.
What is ISO 42001?
ISO/IEC 42001 is the international standard for AI management systems, published in 2023. It provides a framework for organizations to establish, implement, and continually improve governance of AI across their operations. Like ISO 27001 for information security, it is increasingly being requested by enterprise customers and partners as evidence of responsible AI practices.
How should a board of directors oversee AI risk?
Boards are increasingly expected to provide meaningful oversight of AI — not just awareness of it. Effective board-level AI oversight includes clear accountability structures, a defined risk classification framework for AI use cases, regular reporting from management on AI performance and incidents, and board literacy sufficient to ask the right questions. Next Phase Governance works with boards and executive teams to build the structures and materials that make this oversight practical.