Academy / Responsible AI & Governance

Path 4 · Course 3 · For compliance, risk, legal, product and technology leaders

AI Governance, Risk & Compliance

Build an AI governance programme that works: operating models and roles, the global regulatory landscape, the NIST AI Risk Management Framework, ISO/IEC 42001, AI inventories, risk and impact assessments, vendor due diligence, monitoring and audit.

📘 6 modules⏱ About 3.5 hours✅ Knowledge check per module🎓 Final assessment & certificate🎯 EU AI Act course helpful

0 of 6 modules complete

Start Module 1 Final assessment

Modules

  1. 1

    What AI governance is

    Definition, why now, governance as an enabler, operating models, key roles and the three lines model.

    25 min
  2. 2

    The regulatory landscape

    The EU AI Act, the UK's regulator-led approach, the US, China and international frameworks, and existing laws that apply to AI.

    30 min
  3. 3

    The NIST AI Risk Management Framework

    Trustworthy AI characteristics, the Govern–Map–Measure–Manage functions, a worked example, the Generative AI Profile and profiles.

    30 min
  4. 4

    ISO/IEC 42001 and AI management systems

    What an AI management system is, the clause structure, Annex A controls, related standards, how it relates to NIST and the EU AI Act, and certification.

    30 min
  5. 5

    Inventories, risk and impact assessment

    Building an AI inventory, risk tiering, assessing and treating risk, impact assessments (AIIA, DPIA, FRIA) and vendor due diligence.

    35 min
  6. 6

    Running an AI governance programme

    The policy stack, lifecycle gates, monitoring, incident management, assurance, metrics, a 90-day roadmap and culture.

    30 min