AI governance is the set of policies, roles and controls that make an organisation’s use of AI safe, lawful and accountable. Dr. George Melillos, Associate Professor at the American University of Cyprus and PECB Certified ISO/IEC 42001 Senior Lead Implementer, helps organisations in Cyprus and Greece build AI governance that meets the EU AI Act and stands up to audit.
Among the first PECB-certified ISO/IEC 42001 Senior Lead / Lead Implementers in Cyprus and Greece (confirmed by PECB, October 2026).
What AI governance covers
- AI inventory. A complete list of the AI systems and tools in use, including everyday staff use of assistants such as ChatGPT or Copilot.
- Risk classification. Which uses could fall into the EU AI Act’s higher-risk categories, and what that means in practice.
- AI policy. Clear rules on what is allowed, what is not, and who decides.
- Roles and oversight. A named owner for each AI system and human review where AI affects people or decisions.
- AI literacy. Training so that staff and boards understand the risks and limits of the tools they use.
- Monitoring. A way to record AI errors and incidents, learn from them and improve.
How ready is your organisation?
Tick each statement that is true today. Your result updates as you go. Nothing is sent or stored.
Discuss your result in a 30-minute call
Services
EU AI Act readiness assessment
An inventory of your AI systems, a first risk classification and a prioritised roadmap of what to do and when.
AI policy development
An AI policy and acceptable-use rules written for your organisation, with roles, approvals and review cycles.
AI risk and impact assessment
A structured look at the risks of specific AI systems for your organisation and for the people they affect.
AI literacy training
Practical training for staff, managers and boards, in Greek or English. See AI seminars in Cyprus.
ISO/IEC 42001 implementation
A full AI Management System ready for certification by an accredited body. ISO/IEC 42001 implementation in Cyprus.
Ongoing AI leadership
Part-time senior guidance for organisations without an in-house AI lead. See Fractional CAIO.
How an engagement works
- Conversation. 30 minutes to understand which AI you use and what you need to show.
- Assessment. Inventory, risk classification and gap analysis.
- Roadmap. A prioritised plan with clear owners.
- Implementation. Policy, controls, training and oversight put in place.
- Assurance. Optional ISO/IEC 42001 certification readiness.
Who this is for
Financial services and investment firms, insurers, education and training providers, public bodies and SMEs in Cyprus and Greece that use AI and need to show clients, regulators, auditors or boards that it is governed responsibly.
Research behind the practice
This work rests on an academic base: 75+ publications (29 indexed in Web of Science), 291 peer reviews, participation in 9 European research projects, and more than 70,000 hours of IT and AI training since 2000. Dr. Melillos teaches AI at the American University of Cyprus and the Cyprus University of Technology.
Frequently asked questions
What is AI governance?
AI governance is the set of policies, roles and controls an organisation uses to make sure its AI is safe, lawful and accountable. It covers which AI is used, who is responsible for it, how risks are assessed and how people oversee its outputs.
Does the EU AI Act apply to companies in Cyprus?
Yes. The EU AI Act applies across the EU, including Cyprus, to organisations that develop, place on the market or use AI systems. What each organisation must do depends mainly on its role and on the risk level of the AI systems involved.
What is the difference between AI governance and ISO/IEC 42001?
AI governance is the overall goal: responsible, accountable use of AI. ISO/IEC 42001 is an international standard for an AI Management System, a structured and certifiable way to put AI governance into practice and prove it to others.
Do small companies need AI governance?
Yes, in proportion to their use of AI. For most small companies it starts with an inventory of AI tools, a short AI policy, a named owner and basic staff training. These steps reduce risk quickly and cost little.
Is ISO/IEC 42001 certification the same as EU AI Act compliance?
No. The EU AI Act is law, while ISO/IEC 42001 is a voluntary standard. A well-built AI Management System covers much of the governance the Act expects, but legal obligations such as risk classification and, where required, conformity assessment remain separate.
Start with a 30-minute call
Tell me which AI systems you use and what you need to show to clients, regulators or auditors. I will tell you where you stand and what a realistic next step looks like.
Last updated: