Mycroft Assistant - Your Personal AI CISO!

Last updated: April 14, 2026

The Mycroft Assistant pilot at the top of the homepage is an AI agent built by the security, privacy and risk experts at Mycroft!

It is a great resource for asking questions about your security posture, including security questionnaires that come up in sales discussions!

Mycroft acts as a Risk Operations Center for Enterprise clients, with access with a Security Questionnaire module (currently in beta). If you have complex questionnaires, contact us to learn more about how we can support dozens, hundreds or even over a thousand questions for you!

Questions you can ask:

  • What/When/Who/How is [Blank]?

    • What is our incident response plan?

    • When does my current SOC 2 report expire?

    • Who was the last person we hired?

    • I am trying to close company X, what risks should I consider adding to my risk assessment?

    • How much work is it to go after ISO42001 next?

  • How to know what evidence to provide for a control?

How to know what evidence to provide for a control?

You may notice that most controls may be high-level and vague; this is intentional as Mycroft supports organizations across all industries, sizes and maturity, and these factors often impact control requirements.

If you are uncertain on what to do, or how to collect evidence for a control, you can ask the Mycroft Assistant at the top of the home page

image.png

Example shown below: How to provide evidence for control: ac-2 user segregation?

Mycroft Assistant pulls data directly from your platform to provide guidance around your compliance projects and inquiries!

Mycroft also provides VCISO services as part of our success packages and onboarding. If you would like consultation from the experts building the logic behind the Mycroft Assistant, reach out sales or support get started.

image.png