{"id":68862,"date":"2026-08-14T12:25:26","date_gmt":"2026-08-14T10:25:26","guid":{"rendered":"https:\/\/www.usd.de\/?page_id=68862"},"modified":"2026-08-14T12:35:51","modified_gmt":"2026-08-14T10:35:51","slug":"ai-audit","status":"publish","type":"page","link":"https:\/\/www.usd.de\/en\/security-audits\/ai-audit\/","title":{"rendered":"AI Audit"},"content":{"rendered":"

[et_pb_section fb_built=\"1\" _builder_version=\"4.16\" _module_preset=\"default\" custom_padding=\"0px||0px||true|false\" locked=\"off\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_row _builder_version=\"4.16\" _module_preset=\"default\" width=\"100%\" custom_padding=\"0px||||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.16\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.7\" _module_preset=\"default\" text_text_color=\"#FFFFFF\" text_font_size=\"30px\" text_line_height=\"1.2em\" header_font=\"Roboto||||||||\" header_text_color=\"#F07F1D\" header_font_size=\"50px\" background_color=\"rgba(99,99,99,0.47)\" background_image=\"https:\/\/www.usd.de\/wp-content\/uploads\/Leistung-AI-Audit-Header-usd-AG.jpg\" background_blend=\"multiply\" custom_margin=\"-25px||0px||false|false\" custom_padding=\"95px||60px||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n

AI Audit<\/h1>\n

Clarity About Your AI Governance and Its Effectiveness.<\/span><\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.27.4\" _module_preset=\"default\" custom_padding=\"0px||19px||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.24.1\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n

Traditional IT or security audits review access controls, availability, and emergency management. However, AI systems raise new questions: How is the quality of training data ensured? How are bias risks assessed? Are automated decisions traceable? And how are risks from external models, cloud services, or AI service providers managed?<\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\"3_5,2_5\" _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"3_5\" _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.7\" _module_preset=\"default\" custom_padding=\"||0px|||\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n

AI Audits create transparency about the maturity level and effectiveness of your governance, risk, and control structures. We assess existing measures based on regulatory requirements, for example from the EU AI Act<\/a>, as well as recognized standards and audit frameworks such as ISO 42001, the BSI criteria catalogs, or the BSI A5 audit framework for trustworthy AI.<\/p>\n

[\/et_pb_text][\/et_pb_column][et_pb_column type=\"2_5\" _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_image src=\"https:\/\/www.usd.de\/wp-content\/uploads\/Leistung-AI-Audit-Kachel-usd-AG.jpg\" title_text=\"Leistung-AI-Audit-Kachel-usd-AG\" _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.27.4\" _module_preset=\"default\" custom_padding=\"0px||19px||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.24.1\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n

The result is a sound assessment of the effectiveness of your controls, identified risks, and specific areas for action.<\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_testimonial portrait_url=\"https:\/\/www.usd.de\/wp-content\/uploads\/rund_Jan-Kemper.png\" quote_icon_color=\"#F07F1D\" quote_icon_background_color=\"#FFFFFF\" font_icon=\"||divi||400\" portrait_width=\"150px\" portrait_height=\"150px\" use_icon_font_size=\"on\" icon_font_size=\"35px\" _builder_version=\"4.27.7\" _module_preset=\"default\" background_color=\"RGBA(255,255,255,0)\" custom_padding=\"3%||0px||false|false\" animation_style=\"fade\" border_width_all=\"2px\" border_color_all=\"#F07F1D\" border_radii_portrait=\"on|100%|100%|100%|100%\" border_color_all_portrait=\"RGBA(255,255,255,0)\" box_shadow_style_image=\"preset4\" box_shadow_horizontal_image=\"0px\" box_shadow_vertical_image=\"0px\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]AI changes not only technologies, but also risk profiles and control requirements. Companies need to understand where AI is used, which decisions it influences, and whether existing governance and control mechanisms are sufficient to manage these risks effectively.<\/span><\/p>\n

Jan Kemper, Principal usd Security Audits & PCI<\/span>[\/et_pb_testimonial][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.27.6\" _module_preset=\"default\" custom_margin=\"||0px||false|false\" custom_padding=\"30px||1%||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.24.1\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.7\" _module_preset=\"default\" custom_padding=\"||0px||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n

Transparency About the State of Your AI Governance<\/h2>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.24.1\" _module_preset=\"default\" custom_padding=\"0px||0px|||\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.24.1\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.7\" _module_preset=\"default\" custom_padding=\"||19px||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]Whether for management, internal audit, or supervisory bodies: An AI Audit shows how effective your governance structures truly are today. We assess not only policies and documents, but also their practical implementation and effectiveness.<\/p>\n

Typical AI Audit Services include:[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\"1_2,1_2\" _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"1_2\" _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_image src=\"https:\/\/www.usd.de\/wp-content\/uploads\/cra-threat-modeling-prozesse.svg\" title_text=\"cra-threat-modeling-prozesse\" align=\"center\" _builder_version=\"4.27.7\" _module_preset=\"default\" width=\"28%\" width_tablet=\"35%\" width_phone=\"30%\" width_last_edited=\"on|phone\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][\/et_pb_image][et_pb_text _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n

Maturity analysis with prioritized recommendations for action<\/p>\n

[\/et_pb_text][\/et_pb_column][et_pb_column type=\"1_2\" _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_image src=\"https:\/\/www.usd.de\/wp-content\/uploads\/\/pci-zertifizierungsprozess-zertifizierung.svg\" alt=\"PCI Zertifizierungsprozess Zertifizierung\" title_text=\"pci-zertifizierungsprozess-zertifizierung\" align=\"center\" _builder_version=\"4.27.7\" _module_preset=\"default\" width=\"28%\" width_tablet=\"35%\" width_phone=\"30%\" width_last_edited=\"on|tablet\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][\/et_pb_image][et_pb_text _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n

Internal audits in accordance with ISO 42001<\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\"1_2,1_2\" _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"1_2\" _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_image src=\"https:\/\/www.usd.de\/wp-content\/uploads\/einfuehrung-thread-modeling-4.svg\" title_text=\"einfuehrung-thread-modeling-4\" align=\"center\" _builder_version=\"4.27.7\" _module_preset=\"default\" width=\"28%\" width_tablet=\"35%\" width_phone=\"30%\" width_last_edited=\"on|tablet\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][\/et_pb_image][et_pb_text _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n

Audits based on the BSI AI criteria catalog<\/p>\n

[\/et_pb_text][\/et_pb_column][et_pb_column type=\"1_2\" _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_image src=\"https:\/\/www.usd.de\/wp-content\/uploads\/ki-governance-frameworks.svg\" title_text=\"ki-governance-frameworks\" align=\"center\" _builder_version=\"4.27.7\" _module_preset=\"default\" width=\"28%\" width_tablet=\"35%\" width_phone=\"30%\" width_last_edited=\"on|phone\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][\/et_pb_image][et_pb_text _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n

Assessment of AI risks at service providers and third parties<\/br> (e.g., in the context of DORA and NIS-2)<\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.27.6\" _module_preset=\"default\" custom_padding=\"6%||0px||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.24.1\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.7\" _module_preset=\"default\" custom_margin=\"0px||||false|false\" custom_padding=\"0px||||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n

Where Are You on Your Path to Robust AI Governance?<\/h2>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.27.7\" _module_preset=\"default\" custom_margin=\"||0px||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.7\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n

Before introducing an AI management system or implementing specific regulatory requirements, a structured assessment creates clarity about the actual need for action.<\/p>\n

We analyze existing processes, roles, controls, and evidence and assess them based on recognized standards, regulatory requirements, and additional individual internal or external requirements:<\/p>\n

 <\/p>\n