AI Governance, Risk & Compliance
EU AI Act, NIST AI RMF, ISO 42001, and enterprise governance operations
A rigorous 15-module program preparing risk, compliance, and product leaders to build and operate enterprise AI governance functions. Covers the EU AI Act in depth, NIST AI RMF, ISO 42001, model cards, bias testing, privacy, human oversight, generative and agentic AI governance, and sector-specific overlays. Board-ready capstone.
Learning objectives
- 01Navigate the EU AI Act, NIST AI RMF, and ISO 42001
- 02Design model cards, data sheets, and system cards
- 03Implement bias testing and mitigation
- 04Structure human oversight and accountability
- 05Build the governance function: committee, roles, processes, vendor oversight
15-module program
01FreeThe GRC Landscape 2026
Why governance is now board-level.
- 1.From Nice-to-Have to Board Mandate12m
- 2.Scope of AI GRC10m
- 3.The Business Case for Governance8m
02FreeEU AI Act in Depth
The world's first comprehensive AI regulation.
- 1.Risk-Tier Framework12m
- 2.Obligations for Deployers15m
- 3.Timeline & Enforcement10m
03FreeNIST AI Risk Management Framework
The US voluntary standard.
- 1.The GOVERN-MAP-MEASURE-MANAGE Loop12m
- 2.Applying the RMF12m
- 3.Sector Overlays10m
04FreeISO/IEC 42001 AI Management Systems
The first international AI standard.
- 1.Structure of the Standard12m
- 2.Certification Path15m
- 3.The Business Value of ISO 4200110m
05FreeModel & Data Risk Basics
The building blocks.
- 1.Model Risk Categories12m
- 2.Data Risk Categories12m
- 3.Risk Registers10m
06PremiumModel Cards, Data Sheets & System Cards
Documentation that satisfies auditors.
- 1.Model Card Anatomy12m
- 2.Data Sheets12m
- 3.System Cards & Emergent Behavior8m
07PremiumBias Testing & Mitigation
The hardest part of GRC.
- 1.Bias Definitions12m
- 2.Testing Tools12m
- 3.Mitigation Techniques10m
08PremiumPrivacy & Data Protection
GDPR, CCPA, and beyond.
- 1.GDPR Article 22 & Automated Decisions12m
- 2.PII Handling in LLM Systems12m
- 3.Right-to-Forget in AI Systems10m
09PremiumHuman Oversight & Accountability
Who owns AI decisions?
- 1.Oversight Models12m
- 2.Accountability Structures12m
- 3.Incident Response10m
10PremiumAuditing AI Systems
External and internal.
- 1.Internal Audit Function12m
- 2.External Audits12m
- 3.Audit Trails10m
11CertificationGovernance for Generative AI
New risks the frameworks weren't built for.
- 1.Copyright & Training Data15m
- 2.Hallucination as a Governance Issue12m
- 3.Deepfakes, Impersonation & Misuse10m
12CertificationGovernance for Agentic AI
The autonomy problem.
- 1.Bounded Autonomy15m
- 2.Multi-Agent Governance12m
- 3.Tool-Use Governance10m
13CertificationSector-Specific Overlays
Banking, healthcare, government.
- 1.SR 11-7 for Banks15m
- 2.FDA AI/ML Guidance12m
- 3.Government & Public Sector10m
14CertificationBuilding the Governance Function
Org design and ops.
- 1.The AI Governance Committee12m
- 2.Roles & Hiring12m
- 3.Vendor & Third-Party Governance10m
15CertificationCapstone: Design a Governance Program
Board-level deliverable.
- 1.Capstone Brief15m
- 2.Deliverable 1: Policy Charter20m
- 3.Deliverable 2: Board Presentation25m