Use AI with confidence. Keep patient and client data safe.
Prime Tech Associates helps healthcare organizations, community banks, credit unions and growing businesses put clear rules and real security around AI, aligned to NIST AI RMF, ISO/IEC 42001 and HIPAA. For acquirers, we find cyber and AI risk in a target before you sign.
Service-disabled veteran-owned · Minority-owned · Led by Edmond K. Sarpong, CISSP, CISM, CISA, CRISC, PMP, AIGP, AAISM
Questions we help you answer
AI governance and security, sized for real organizations.
Your staff and your vendors are already using AI. We help you find it, set sensible rules, lock down the data and prove it to examiners, auditors, insurers and buyers.
AI Risk Assessment
A fixed-price review of how AI is used across your organization, with a prioritized, plain-language action plan. $5,000.
Learn more →Home Care AI Governance Starter
AI inventory, use policy, vendor and BAA checklist, staff training and a HIPAA Security Risk Analysis, bundled. $3,500–$7,500.
Learn more →AI Policy & Governance Program
An acceptable-use policy, named owners, an approval process and a review cycle your team can actually run.
Learn more →Shadow AI Discovery
Find the AI tools and browser extensions staff use without approval, and what data is flowing into them.
Learn more →AI / LLM Security Testing
Prompt injection, data leakage and access testing for chatbots, copilots and AI integrations, mapped to the OWASP LLM Top 10.
Learn more →Fractional AI Officer
Ongoing AI oversight on a monthly retainer: vendor reviews, policy updates, quarterly reviews, board reporting and a person to call. $2,500, $4,500 or $7,500/month.
Learn more →AI Governance for Banks & Credit Unions
AI inventory, third-party AI vendor due diligence, board-approved AI policy and examiner-ready documentation for community banks and credit unions.
Learn more →M&A Cyber & AI Due Diligence
Security posture, AI use, data rights and AI vendor risk in a target, reported in deal terms before you sign.
Learn more →AI Vendor Review
Contract, data-use and security review of an AI product before you buy, renew or expand it, including BAA terms for healthcare.
Learn more →Ongoing AI oversight from $2,500/month.
AI tools change every month. A one-time assessment tells you where you stand; a Fractional AI Officer keeps it that way. You get a named lead credentialed in security, audit, risk and AI governance (CISSP, CISM, CISA, CRISC, PMP, AIGP, AAISM) who reviews new tools, keeps your policy current, reports to leadership and picks up the phone when a question comes up.
Three monthly tiers
- Essentials, $2,500/mo. Monthly check-in, new-tool reviews, quarterly governance review.
- Growth, $4,500/mo. More hours, deeper vendor and AI app reviews, training refreshers.
- Executive, $7,500/mo. Board-level reporting, priority on-call and incident support.
3-month minimum. No full-time hire required.
AI governance your examiners and board can follow.
There is no single AI rule for financial institutions. Examiners look at AI through the programs you already run: third-party risk, information security, compliance and board oversight. Much of your AI arrives inside vendor products. We help you inventory it, vet the vendors, write the policy and document it.
For CISOs, CIOs and risk officers
- AI inventory that includes AI features inside core, digital banking, fraud and contact-center vendors
- Third-party AI vendor due diligence questions and review
- Board-approved AI acceptable-use policy and risk appetite language
- Examiner-ready evidence mapped to NIST AI RMF and your cyber framework
- AI Risk Assessment $5,000 flat · Fractional AI Officer from $2,500/month
Find cyber and AI risk in a target before you sign.
Targets increasingly run on AI tools and AI vendors. We review security posture, AI use, data rights, AI vendor dependence and regulatory exposure, and translate findings into price, reps and warranties, and Day 1 actions.
Deal-ready deliverables
- Red-flag summary for the investment committee
- Findings with cost, time and deal impact
- Items for reps, warranties, escrow or price
- Day 1 security and AI baseline plan
Comfortable working under NDA from the first call.
Eight steps. Mapped to NIST AI RMF and ISO/IEC 42001.
A simple structure we use on every engagement, so your AI program makes sense to staff, auditors, insurers and future buyers.
Inventory
List every AI tool in use, who uses it, what data goes in, and what decisions it touches. Include the AI features hiding inside software you already pay for.
Policy & ownership
Write a plain-language AI acceptable-use policy and name an owner for each tool. Someone has to be accountable for saying yes or no.
Data protection
Decide what data may never go into AI tools (patient records, Social Security numbers, financials) and put technical guardrails behind the rule.
Vendor vetting
Check how each AI vendor stores, trains on and shares your data. For healthcare, confirm whether a Business Associate Agreement is offered and signed.
Access & logging
Use company accounts with single sign-on and MFA, not personal logins. Turn on audit logs so you can see who used what.
Testing
Test AI chatbots and integrations for prompt injection, data leakage and wrong answers before customers or patients see them.
Training
Give staff short, practical training: what is allowed, what is not, and how to spot an AI output that should not be trusted.
Quarterly review
Every quarter, re-check the inventory, vendors, incidents and policy. AI tools change monthly; your controls should keep up.
AI controls only work if the basics work.
Strong accounts, protected devices, safe email and tested backups are what make AI rules enforceable. We continue to provide managed IT and cybersecurity for Las Vegas and Henderson businesses.
AI is already in your business. The goal is not to stop it. The goal is to know where it is, decide the rules, and protect the people whose data you hold.
Frequently asked questions
What is AI governance, in plain terms?
It is the set of rules, owners and checks that decide which AI tools your organization uses, what data can go into them, and how you know they are working safely. For most small and mid-sized organizations it fits in a short policy, an inventory, vendor reviews and a quarterly review.
How much does an AI risk assessment cost?
Our AI Risk Assessment is a flat $5,000 for a standard engagement, quoted in writing before work starts. AI/LLM security testing of a specific application is quoted separately if you need it.
How much does a fractional AI officer cost?
Three monthly tiers: Essentials $2,500/month, Growth $4,500/month and Executive $7,500/month, with a 3-month minimum and month-to-month after that.
What does HIPAA AI compliance cost for a clinic or home care agency?
The Healthcare AI Governance Starter is $3,500 to $7,500, fixed by organization size. It includes an AI inventory, AI use policy, vendor and BAA checklist, staff training and a HIPAA Security Risk Analysis with AI tools in scope.
Do you work with community banks and credit unions?
Yes. We help banks and credit unions inventory AI (including AI inside vendor products), run AI vendor due diligence, write board-approved AI policy and prepare for examiner questions. The same published prices apply.
Do you do M&A cyber and AI due diligence?
Yes. We assess a target's security posture, AI use, data rights and AI vendor dependence, and report findings in deal terms: price, reps and warranties, and Day 1 actions. Work is fixed-fee, scoped after an NDA call.
Does HIPAA apply to AI tools?
Yes. If protected health information is entered into an AI tool, that vendor is handling PHI and HIPAA rules apply, including the need for a Business Associate Agreement and a risk analysis that covers the tool.
Which frameworks do you use?
The NIST AI Risk Management Framework, ISO/IEC 42001, the HIPAA Security Rule, the OWASP Top 10 for LLM Applications, and for financial institutions, your existing cybersecurity framework (NIST CSF 2.0, CRI Profile or similar) and third-party risk program.
Where do you work?
We are based in Henderson, Nevada and serve Las Vegas, Henderson and the rest of Nevada in person, and clients nationwide remotely.
Not sure where AI is already being used in your business?
Start with a 30-minute call. We will ask a few plain questions, tell you what we would look at first, and give you a fixed price if an assessment makes sense.