James Godfrey
Senior Consultant, AI Audit and Assurance
CISA, CRISC, ISACA AAIA, ISTQB CT-AI
Focus: AI assurance testing, red team assessments, bias audits of hiring tools, and AI audits
About Us
Cogent Assurance is an independent advisory firm focused on AI governance and data privacy. We help companies, public agencies, and nonprofits adopt AI with confidence, with clear policies, accountable owners, tested systems, and records that hold up to regulators, auditors, and the public. Because we don’t sell, resell, or implement software, our advice serves one interest: yours. Our team brings hands-on experience delivering, testing, and auditing enterprise systems, and we keep our guidance current as state, federal, and international rules change.
Our team
Experts with real-world experience delivering, testing, and auditing the systems and programs we advise on.
Justin Davis, Managing Principal
Justin has spent 20+ years in enterprise technology, leading the design and delivery of customer data systems, integrations, and AI deployments for organizations across the private, public, and nonprofit sectors.
He helps organizations govern AI with the same discipline they apply to finance and security: clear owners, written standards, and evidence that the standards are followed.
At a glance
- 20+ years in enterprise technology
- AI Governance and AI Audit: AIGP, ISO/IEC 42001 Lead Auditor, AAIA, EXIN, CAITL
- Data Privacy: FIP, CIPP/US, CIPP/E, CIPM, CIPT
- IT Audit and Risk: CISA, CRISC, ISO/IEC 27001 Lead Auditor, CCSK
- Project Management: PMP
- Proposal Management: APMP Certified Foundation, Practitioner, and Professional
- MBA, Information Technology Management
- US Army veteran
Senior Consultants
Michael Hannigan
Senior Consultant, Privacy and Data Protection
FIP, CIPP/US, CIPP/E, CIPM, CIPT
Focus: Privacy program builds, privacy impact assessments, HIPAA risk analysis, and EU data rules
Specialists we bring to each engagement
Depending on the work, our principal is joined by consultants with deep experience in the areas below. We’re adding consultants to our network.
AI audit and assurance
Testing AI systems and management programs against ISO/IEC 42001, the NIST AI RMF, and client policy.
Privacy and data protection
Data mapping, privacy impact assessments, and state and international privacy law.
Information security
Security controls, cloud security, and ISO/IEC 27001 alignment for the systems AI runs on.
AI engineering and testing
How models and AI agents are built, evaluated, and monitored in production.
Public sector procurement
Solicitation language, evaluation criteria, and contract requirements for AI purchases.
Research and policy
Tracking AI legislation and regulation, and turning it into practical guidance.
How we work
Independent.
We advise. We don't sell software or implementation services, and we don't bid on the implementation work we help agencies procure.
Built by an integrator.
We know how AI systems are actually deployed, so our policies account for real technology, real vendors, and real deadlines.
Practical.
Every deliverable is written for the people who have to use it, in plain language, sized to your organization, and ready to put into practice.
Talk through your AI and privacy questions
Tell us what you're working on, and we'll reply within one business day.