risk3sixty

risk3sixty is a governance, risk and compliance consultancy in Roswell, Georgia, whose ISO/IEC 42001 practice is aimed at technology companies adding an AI management system certificate to an existing ISO 27001 or SOC 2 program. The firm sells three distinct ISO 42001 services: an end-to-end implementation program, a clause 9.2 internal audit positioned as preparation for the external certification audit, and an AI risk assessment addressed at clauses 6 and 8, with the management system harmonized against the rest of a client's framework stack. The wider practice covers ISO 27001, SOC 2, PCI DSS, HITRUST, FedRAMP and CMMC work plus penetration testing, and engagements include access to the firm's own fullCircle GRC platform. Delivery is by US-based consultants who work with client teams over shared Slack channels, operating from a single Georgia office. The team page names Josh Smith, a director in the advisory practice, as the firm's first certified ISO 42001 Lead Implementer. EU AI Act advisory is not part of the published offering, and no pricing is disclosed.