About Shubham Raut

I'm an information security consultant specialising in AI governance and ISO implementation. I help AI first companies build the security and governance foundations they need to pass enterprise reviews, win regulated industry deals, and get certified.

My focus is the intersection of AI and compliance, specifically ISO/IEC 27001:2022, ISO/IEC 42001:2023, the EU AI Act, SOC 2, and GDPR. I've built this entire site, the reference implementation, the templates, the playbooks, as a public demonstration of how I work. Everything here follows the same methodology I use on real engagements.

I hold dual Lead Auditor certifications in ISO 27001 and ISO 42001, plus a CISSP and ISC² CC. I've implemented management systems for companies across the Philippines and Malaysia, and I'm building a consultancy focused on making AI governance accessible to growing companies worldwide.