Shadow AI in LATAM: 73% of Certified Organizations Run AI Without Oversight
A survey of 140 organizations with active ISO 27001 certification across Argentina, Brazil, Colombia, Mexico, and Peru found that 73% have…
Cargando
Preparando la información solicitada…
I work with boards and complex organizations on AI audit, information security, and ISO 42001 · 27001 · 9001 readiness. Governance with evidence: every process generates auditable data, not just documents. Certification decisions are made by accredited bodies.

What cannot be audited
cannot be governed. Every engagement produces verifiable records under ISO standards.
I don't advise on processes I haven't assessed.
The criteria come from directing an accredited certification body, not from theory.
25,000 organizations in 95 countries.
869+ press mentions. 19 published research papers. Not a promise — a track record.
60-second summary: diagnosis, evidence, and readiness before the audit.
See evidenceIf the video does not load, the evidence is in the reports.

Most organizations do not fail by intent. They fail by lack of operational evidence and traceability.
Policies without records, controls without proof, and unclear ownership.
Without evidence there is no solid audit.Active systems without inventory, impact analysis, or verifiable human oversight.
ISO 42001 demands traceability and control.Access, incidents, and third parties without consistent controls or metrics.
ISO 27001 requires evidence of control.Policies, controls, human oversight and accountability. Shadow AI, EU AI Act and continual improvement.
View AI governance →ISO/IEC 42001Verifiable control of algorithmic risk. System inventory, traceability and remediation.
View AI audit →ISO/IEC 27001ISMS, risk management, Annex A controls and certification readiness.
View security →Five phases with evidence at every step. Documented and verifiable deliverables.
Real state of the system, no assumptions.
Gaps prioritized by impact.
Corrections with operational criteria.
Changes verified in the field.
Indicators, evidence and continual improvement cycle (PDCA).
Leadership roles in certification and accreditation bodies, international credentials and media presence backing every assessment.
Columns and interviews published in regional media. External evidence of work in auditing, AI, and governance.
How ISO 9001 certification drives sales, opens new markets, and facilitates access to financing for businesses of all sizes.
InfobaeAnalysis of the challenges facing Argentine public management in 2026: processes, transparency, and institutional continuity.
Poder LocalKeys to implementing AI in business without compromising operations: governance, ISO 42001, and algorithmic risk control.
InfobaeResearch on AI governance, information security, algorithmic risk and data quality. Verifiable content with downloadable frameworks.
A survey of 140 organizations with active ISO 27001 certification across Argentina, Brazil, Colombia, Mexico, and Peru found that 73% have…
The complete cross-mapping between the 93 Annex A controls of ISO 27001:2022 and the Annex A controls of ISO 42001:2023 identified 37…
Analysis of ISO Survey data, accredited certification body reports, and regulatory records from 12 countries determined that ISO 27001…
Operational principles that organize audit, ethics, and accountability.
Without verifiable records, no system survives a real audit.
The difference is who evaluates and what is demanded as proof.
Press and publications as external traceability of the work.
ISO/IEC 42001 is the international standard for AI management systems (AIMS). It establishes requirements for governing AI with policies, roles, controls and continual improvement. If your organization develops, deploys or uses AI systems, ISO 42001 is the framework for managing them with auditable evidence.
An AI audit assesses the current state: system inventory, algorithmic risks, control gaps and traceability. AI governance designs the management system: policies, roles, human oversight and accountability. The audit diagnoses; governance builds.
It depends on the organization's size and maturity. On average, between 3 and 12 months. The gap assessment is delivered within 72 hours and reveals the real state before starting.
Shadow AI is the unauthorized use of artificial intelligence systems within an organization. It is detected through inventory auditing, data flow analysis and interviews with critical areas. Our research INV-01 documents its prevalence in certified LATAM organizations.
Yes. I operate with my team in 95 countries. We have direct presence in Argentina, Mexico, Colombia, Peru, Chile, Uruguay, Paraguay, Spain and Dominican Republic. Audits and consulting are conducted both in-person and remotely.
We prepare the organization: assessment, implementation, gap closure and audit simulation. Certification is issued by an independent accredited body. We prepare; the certification body decides.
Open channel for organizations looking to strengthen their management systems with criteria and evidence.