AI Governance & AI Security

6 Interactive Sessions

Short, interactive sessions: watch it work, try it, then build it yourself. You can go deeper at any time in the written chapters.

1. 1

   Why AI needs its own governance

   You already have rules for IT systems. AI breaks some of the assumptions behind those rules, so it needs its own governance. The aim is to let people use AI safely, not to stop them.

2. 2

   Laws and frameworks: pick one base and map the rest

   You do not need to master every AI law and framework. Pick one as your base, map the others onto it, and one set of controls can answer many of them.

3. 3

   Build the program: list it, sort it, set rules, name owners

   A policy on its own governs nothing. A working program needs five parts: a list of the AI in use, a risk level for each use, clear rules, a named owner, and a gate that new AI passes through.

4. 4

   AI security risks: name the risk, require the control, check it

   You do not need to know how to attack AI to govern it. You need to know the main kinds of AI risk well enough to ask for the right control and check that it is really in place.

5. 5

   Controls and evidence: show that the risk is handled

   Knowing the risks is not enough. You need a standard set of controls for every AI system, and evidence that they are real, whether your team built the AI or a vendor did.

6. 6

   Run the program: watch, respond, report and prove

   A program set up once and never checked drifts. Governance is a routine: watch all the time, respond when AI fails, report to the board, and keep evidence ready for an audit.

How this certificate is scored

Your certificate shows how many of your written answers met the rubric below, checked by an AI grader. Anyone who checks your certificate sees it.

• You answer 6 short questions, one for each module, in your own words (at least 40 words each).
• An AI grader checks each answer against what its module asks for: it must answer the question, use the course's practice case specifically, and be correct.
• To pass, at least 5 of the 6 answers must meet that bar. The certificate says the answers were graded by AI.

The rubric

1. Module 1, Why AI Needs Its Own Governance: The AI TRiSM frame and the three surfaces you govern: AI you buy, build, and its risk.
2. Module 2, The Frameworks & Regulatory Landscape: A chosen baseline across NIST AI RMF, ISO 42001, and the EU AI Act.
3. Module 3, Building the AI Governance Program: An AI inventory/registry, risk classification, policies, and accountability roles.
4. Module 4, AI Security Risks You Must Govern: For each AI risk: what it is, the control to require, and how to verify it.
5. Module 5, Controls, Assurance & Third-Party AI Risk: A control baseline plus a vendor-AI questionnaire and the assurance to demand.
6. Module 6, Running It — Monitoring, IR & Audit: A complete AI governance & security program, ready for the board and the auditor.

What you walk away with