AIS105 · AI Governance Frameworks and Policies

Categories: Cybersecurity
Wishlist Share

About Course

Build an AI governance structure that fits your organization using the NIST AI RMF, ISO/IEC 42001 and the EU AI Act, and turn it into clear policies, roles and approval workflows.

Advance · 8 hours · 4 lessons, a lab, an assessed assignment and a portfolio piece

Who it is for

Compliance, risk, security and IT leaders and business owners who must set rules for how their organization builds, buys and uses AI.

Prerequisites

Complete AIS101 through AIS104, or have equivalent experience with AI risk, privacy and security.

What you will be able to do

  • Compare the purpose, structure and obligations of the NIST AI RMF, ISO/IEC 42001 and the EU AI Act
  • Classify AI use cases by risk tier and determine applicable obligations
  • Design governance roles, decision rights and an AI use-case approval workflow
  • Draft an AI policy set and a crosswalk that maps each policy to framework requirements

Lessons

  • Lesson 1 · The AI governance landscape
  • Lesson 2 · Governance structure, roles and decision rights
  • Lesson 3 · Writing AI policies and crosswalks
  • Lesson 4 · Lab and assignment

Lab: Draft an AI policy set and framework crosswalk

You draft an AI governance charter, an acceptable-use policy and an AI use-case intake form for a fictional 120-person regional health-services company. You then build a crosswalk spreadsheet linking each policy clause to NIST AI RMF subcategories, ISO/IEC 42001 clauses and, where relevant, EU AI Act articles.

Free tools: Google Docs or LibreOffice Writer, Google Sheets or LibreOffice Calc, the free NIST AI RMF Playbook and the official EU AI Act text

Assessed assignment

Deliver an AI governance package for a mid-sized organization of your choice. It must include a governance charter with roles and decision rights, an acceptable-use policy, an AI use-case intake and approval workflow with risk tiers, a vendor AI due-diligence checklist and a crosswalk to at least two frameworks. Explain how the package would be rolled out and reviewed annually.

Criterion Weight What excellent work looks like
Framework understanding 20% Frameworks are described accurately and the crosswalk links policies to specific functions, clauses or articles.
Roles and decision rights 25% Roles, accountability and escalation paths are clear and proportionate to the organization.
Policy quality 30% Policies are specific, enforceable, readable and cover build, buy and use of AI.
Workflow and rollout 25% The intake workflow uses risk tiers sensibly, and the rollout and review plan is realistic.

Portfolio piece

An AI governance package with charter, policies, intake workflow, vendor checklist and framework crosswalk.

Self-paced, 12-month access. Questions are answered in writing through the student panel. A completion record is issued when you finish the course.

Next step

Continue with AIS106 · AI Risk Assessment and Audit in Practice · 8 hours · $56.00

Continue to the next course

Prefer the whole program? Program in AI Security, Privacy & Governance · $277.00 (10% less than buying the courses separately)

Show More

What Will You Learn?

  • Compare the purpose, structure and obligations of the NIST AI RMF, ISO/IEC 42001 and the EU AI Act
  • Classify AI use cases by risk tier and determine applicable obligations
  • Design governance roles, decision rights and an AI use-case approval workflow
  • Draft an AI policy set and a crosswalk that maps each policy to framework requirements

Course Content

AIS105 · AI Governance Frameworks and Policies (8 h)
Build an AI governance structure that fits your organization using the NIST AI RMF, ISO/IEC 42001 and the EU AI Act, and turn it into clear policies, roles and approval workflows.

  • Lesson 1 · The AI governance landscape
  • Lesson 2 · Governance structure, roles and decision rights
  • Lesson 3 · Writing AI policies and crosswalks
  • Lesson 4 · Lab and assignment
  • AIS105 Assessment · AI Governance Frameworks and Policies
Scroll to Top