AI Risk Register Pack

Pillar 06 says the register is the deliverable that outlives the engagement. This pair is that claim, made true.

Pillar 06 — The Fractional CISO Operating System. The practice around the register: the aggregation hub, the 2026 pricing ladder, the first 90 days from assessment to first board deck, the five-page board deck, and the layer the AI vCISO platforms structurally cannot replace.

Pillar 06 Companion — The 2026 AI Risk Register. The build: a five-plane register spanning inventory, classification, risk, evidence and conduct, deterministic rule tables for the EU AI Act, NIST AI RMF, ISO 42001, TRAIGA and state ADMT, an AI-native scoring model where autonomy and blast radius are derived from granted tool scopes rather than entered by hand, and 41 sequenced prompts that take you from an empty repository to a working register you own outright. Twenty-seven pages plus the schema, the rule tables and the air-gapped Register Node build sheet.

Why the pair. The pillar tells you what the register is for and how to charge for conducting it; the companion tells you how to build one that survives an acquirer's diligence team asking who accepted a given risk. One gives you the engagement, the other gives you the artifact — and the artifact is what a client still has after you leave. For anyone running a fractional practice the remediation-brief output is the fastest thing here to turn into billable work.

The managed fractional CISO pillar runs both for you if you would rather.