Download and run the toolkit
Use these two assets together. The PDF explains the control system; the Scorecard identifies where to act first and creates a report you can save for your internal baseline.
Secure AI Toolkit for MSPs
Operating model, acceptable-use policy, data handling rules, tool approval register, risk checklist, prompt safety rules, service packaging starter kit, and implementation checklist.
Download PDF →AI Security Scorecard
Answer 30 questions across governance, data, vendor control, prompt safety, connected systems, monitoring, and MSP reseller readiness. Generates a professional PDF report.
Open Scorecard →Install the first governance baseline
Work through the steps in order. The goal is not theory — it is one practical internal AI control baseline, then one repeatable client-facing AI readiness offer.
Save the Toolkit
Keep a working copy of the PDF and use it as the operating baseline for your MSP AI governance work.
Run the Scorecard
Score your own MSP first. Capture the risk band, control gaps, and priority actions before adapting anything for clients.
Assign an AI owner
Give one person accountability for AI tool approval, data rules, policy maintenance, and review cadence.
Publish the policy
Adapt the acceptable-use policy so staff know what can and cannot be entered into AI tools.
Create the register
Classify approved, restricted, and prohibited AI tools, including browser extensions and connected copilots.
Package the audit
Use the discovery questions and delivery checklist to define a repeatable AI Risk and Workflow Audit.
Use the Toolkit and Scorecard together
The Toolkit is the control system. The Scorecard tells you where the biggest implementation gaps are and gives you a client-ready way to explain them.
- Run internally before client use.
- Prioritise low scores before expanding AI workflows.
- Turn repeated work into a fixed-scope MSP offer.
Self-serve, practical, no theatre
This is practical security-aligned guidance, not legal advice, a compliance certification, or a custom consulting engagement.
- Documentation and async FAQ only.
- No calls.
- No custom implementation.
- No 1:1 coaching.
Delivery bundle
secure-ai-toolkit-buyer-facing-v0.3.pdfai-security-scorecard-interactive-v0.3.htmlai-security-scorecard-interactive-v0.3.jsondelivery-page-v0.1.html