Theodora Monye
Theodora AI Advisory
Independent AI governance advisory for organisations deploying AI, designed to hold up under regulatory scrutiny, audit, and board challenge.
theodoramonye.com
"AI governance that works in practice, not just on paper."
Boards and leadership teams across regulated industries are under unprecedented pressure to govern AI responsibly: from EU AI Act obligations and ISO 42001 requirements to internal risk appetite and stakeholder accountability.
Theodora AI Advisory provides independent, strategic governance advisory that translates regulatory complexity into clear, board-ready action. The work is agenda-free, organisation-specific, and designed to withstand scrutiny rather than simply satisfy it.
Governance infrastructure built for your organisation and built to last.
What We Do
Theodora AI Advisory works with boards, senior leadership teams, and governance functions in regulated industries to design and establish AI governance that is proportionate, practical, and aligned to the regulatory frameworks that matter.
Engagements are structured around your organisation's starting point: its risk profile, regulatory exposure, and current stage of AI maturity. The advisory approach begins there and builds accordingly.
Work spans four interconnected areas:
AI Governance Readiness and Risk Assessment
Establishing governance foundations: maturity assessment, regulatory exposure analysis, and a prioritised roadmap proportionate to your organisation's risk profile and strategic ambitions.
AI Strategy Alignment and Governance Integration
Designing the operating models, accountability structures, and change frameworks needed to embed AI governance across the organisation, not just within the compliance function.
Operational AI Governance and Control Design
Translating governance principles into operational controls: policy frameworks, model lifecycle governance structures, and third-party AI oversight grounded in EU AI Act, ISO 42001, and NIST AI RMF.
Where agentic AI systems are in scope, engagements draw on a proprietary L1–L4 Autonomy Classification framework, developed specifically for regulated industry contexts, to define accountability structures, human oversight requirements, and guardrail design proportionate to each system's level of autonomy.
Ongoing AI Governance Oversight and Advisory
Supporting internal capability through executive and board briefings, targeted training, and ongoing advisory support, so governance decisions are made with confidence at every level of the organisation.
Why Independent?
The AI governance market is crowded with vendors selling platforms, consultancies selling headcount, and advisors with undisclosed conflicts of interest.
Independent advisory is different.
There is no software to sell, no methodology to protect, and no incentive to recommend a solution that serves anyone other than the client.
Theodora AI Advisory brings a single asset to every engagement: rigorous, experienced judgment applied to your organisation's specific situation, regulatory context, and strategic objectives.
That independence is not a selling point. It is a structural condition of the work.
Built on the Standards That Matter
Every engagement is grounded in the regulatory frameworks and governance standards that regulated industries rely on:
About Theodora Monye
Theodora Monye is an independent AI governance advisor with a career spanning pharmaceutical, CRO, and biotech environments. She founded Theodora AI Advisory to bring independent AI governance expertise to boards and leadership teams navigating the intersection of AI adoption, regulatory compliance, and organisational risk.
Her advisory work is informed by over a decade of operational experience in pharmaceutical and CRO environments, combined with formal legal training, executive education, and the Institute of Directors' governance curriculum.
Credentials
- LLB (Hons) Law, University of Buckingham
Providing the legal and regulatory foundation to interpret AI legislation, identify organisational obligations, and navigate compliance requirements with precision.
- Executive MBA, Warwick Business School
Grounding governance advisory in commercial strategy, organisational leadership, and the business realities that boards and executive teams navigate daily.
- Certificate in Company Direction, Institute of Directors
Bringing board-level accountability, fiduciary responsibility, and governance best practice directly into every advisory engagement.
- Digital Transformation, Data Leadership & AI Governance, Massachusetts Institute of Technology
Ensuring advisory work is grounded in the latest developments in AI systems, data governance, and the organisational design of technology-led transformation.
The Governance Hub
Every contracted client receives a private, invitation-only Governance Hub, built for their engagement and maintained throughout it. Inside it:
- AI system register with autonomy classification and vendor due diligence
- Deployment checklists with sign-offs before any system goes live
- High Risk system records, with periodic reviews and bias testing
- Risk register, accountability matrix, exposure map and governance roadmap
- Readiness tracking against the EU AI Act, ISO 42001 and NIST AI RMF
- Training records, shadow AI disclosures and a full audit trail
Built for the audit environment
In regulated industries, governance is judged by the evidence an organisation can produce when a regulator, auditor or board committee asks for it. The Hub keeps that evidence in one place: each decision, review and sign-off is recorded with who made it and when, and can be exported as board-ready reports.
The Hub sits alongside your existing compliance and risk systems. There is no platform migration and no integration project.
When a regulator or auditor asks for the documented rationale behind an AI governance decision, the record is already there.
Your existing infrastructure
Continues to operate as-is
Governance Hub
AI-specific governance layer
Board & regulatory reporting
Exported evidence, no migration needed
Governance Toolkit (add-on)
Alongside an engagement, clients can also draw on a practitioner-built toolkit: 21 governance documents and a 10-policy suite covering risk assessment, model lifecycle management, agentic AI and regulatory compliance. For organisations without a governance, risk and compliance platform, it provides a documented foundation, so adopting one later becomes a configuration exercise rather than a redesign.
Built with enterprise-grade security — MFA, encryption, and full client data isolation. Learn more in our FAQ.
Working Together
Engagements are structured to reflect the nature of the work: project-based, day rate, or retained advisory, with scope, deliverables, and timelines agreed in a formal Statement of Work before any work begins.
Every engagement begins with a discovery conversation: a focused, no-obligation discussion about your organisation's AI governance priorities, regulatory exposure, and strategic objectives.
The purpose is to establish whether there is a genuine fit and to ensure any subsequent engagement is scoped to deliver clear, measurable outcomes.
To arrange a discovery conversation:
theo@theodoramonye.com
theodoramonye.com/contact
Theodora Monye
Theodora AI Advisory
Independent AI Governance Advisory
theo@theodoramonye.com
theodoramonye.com
linkedin.com/in/theodora-monye
© 2026 Theodora Monye. All rights reserved.
Theodora AI Advisory is the trading name of Theodora Monye.