Independent advisory

Turn ambiguous issues into something you can decide and act on.

Fragment Practice comes in before execution, when an issue is real but still hard to name. Bring the situation as it is — no finished brief needed — and leave able to decide, explain, and move forward.

Mainly across AI governance, security, and technology risk. Not implementation, not a resident PMO — advisory that works close to the decision.

Bring it as it isDecide and explainMove forward

01

Bring it as it is

No finished brief or perfect category needed. Start from what is actually happening and what feels unclear.

02

Separate and decide

Untangle the mixed issues, name what must be decided, who is responsible, and in what order.

03

Move forward

Leave with decision material, explanation, and clear roles — enough to act, and to keep updating it yourself.

When people reach out

The situations people bring — in their own words.

You do not need to know the right service name. If one of these sounds close to what you are carrying, that is enough to start.

Often heard

AI use spread before the rules did

“People started using generative AI, but what can be entered, how output is used, and who checks it are still unclear.”

Generative AIUse rulesHuman review

Often heard

We want to set up governance, but no one owns the design

“We need to establish AI or security governance across the company, but there is no one inside who can design and run it.”

AI governanceRules and controlResponsibility

Often heard

We have no material to explain to management or vendors

“We need a brief for the management meeting, or a way to hand clear requirements to a vendor — and we do not have it yet.”

Management briefThird-party reviewRequirements

Often heard

We cannot staff a PMO, but we need an expert at the key points

“Not a resident PMO or high-load role — someone to structure the issues and review at the moments that matter.”

Low utilizationAt the key pointsAdvisory

What changes

What you can do after the work.

The point is not a stack of documents. It is that decisions, explanation, and responsibility become possible — and stay possible after the engagement ends.

Decide

It becomes clear what management should decide in the meeting.

Explain

You can explain to stakeholders, and hand requirements to a vendor.

Responsibility

Who decides and who reviews, and how far, is settled.

Prioritize

Options and risks can be compared and put in order.

Progress

You can move from PoC or concept to the next design or rollout.

Keep going

After the engagement ends, your team can keep updating it.

Representative situations

A few patterns, anonymized.

Cases show what was unclear, what was structured, and what people could do next. No client names or confidential detail.

Generative AI governance

Rules and responsibility for expanding AI use

Use cases, input boundaries, output use, human review, and responsibility, turned into material legal, IT, security, and business teams can share.

Use rulesResponsibility

Practical AI-use rules

Turning a policy into criteria the front line can use

High-level rules become concrete review points: what can be entered, how output is used, who reviews, and what to escalate.

Review pointsFront line

Third-party review

Independent review of security policy or risk material

Existing policy, risk assessments, and assumptions reviewed from an outside perspective, with residual risks and next actions organized.

Security reviewRisk

Ways to engage

Three shapes, priced by scope.

Start small. You do not need to pick the final shape before the first conversation — the smallest useful step is usually clear quickly.

Focused first step

Initial structuring session

From ¥200,000

Excl. tax · 1–2 sessions

When the issue is real but you cannot yet say what to decide.

One or two sessions to separate the situation, name the decisions, set priorities, and choose the next move.

Bounded sprint

Decision-material sprint

From ¥1,000,000

Excl. tax · 2–6 weeks

When a meeting, report, rule update, or handoff needs material soon.

Research, structuring, review, and drafting that leave decisions, options, risks, open questions, and responsibility ready to use.

Scoped advisory

Scoped advisory support

From ¥450,000 / month

Excl. tax · ~20–50% of a month

When important decisions keep coming and you want an expert at the key points.

A defined cadence with agreed themes, review scope, and response expectations — without a resident PMO or daily operations.

Fit

When this fits — and when another partner is better.

Direct, so you can decide quickly. The work is upstream of execution and stays close to the decision.

A good fit when you want to

  • Decide what to tackle first when several teams and issues are tangled
  • Move AI adoption and control forward together
  • Turn a policy or requirement into something the front line can use
  • Build material to explain to management or stakeholders
  • Design the next phase after a PoC
  • Evaluate a vendor proposal from an independent view
  • Get an expert at the key points without a high-load role
  • Keep the decision structure and operating model inside your own team

Not the main focus

  • Resident PMO, daily progress management, or running meetings
  • Hands-on implementation, or high-volume request and exception review
  • 24/7 operations or always-on response
  • Audit assurance, certification, or standing in for legal judgment
  • Filling an employee position, or open-ended work with no defined outcome

If your situation is closer to the right-hand list, a resident or implementation partner is usually a better fit — and we are glad to say so early.

Background

An independent practice, applied across a few connected areas.

Founded by Yasuhiro Shinsho after work across BIPROGY, KPMG Japan, and NRI Secure Technologies. The same structuring is applied wherever AI, security, and governance issues arrive mixed together.

Where it applies

AI governanceSecurity and control for AI useSecurity governanceTechnology riskHuman–AI roles and operating designService concept and viabilityManagement and stakeholder explanation

Next step

Start from what needs to become clear — not from a service name.

If the issue already needs specific support, start with Contact. To compare shapes first, Services explains the options; Cases shows similar situations. A polished brief is not required.