AI Governance Practitioner

Operationalizing AI Risk, Compliance, and Security

Certification
CAIGP
Certified AI Governance & Risk Practitioner
Level
Basic
Basic Level
Duration
~12 Hours
10 to 12 hours plus capstone
Format
Self-paced, blended learning
videos + quizzes
Overview

Why This Course Over a Generic Governance Course?

It addresses a current enterprise pain: organizations are adopting AI faster than they can govern it.
It speaks to multiple buyers: CISOs, GRC, legal, compliance, AI product owners, privacy, internal audit, and business leaders.
It aligns with AISA’s differentiation: hands-on labs, readiness measurement, AI security depth, and practical evidence generation.
It creates a natural bridge into AISA’s technical courses on agentic AI, LLM security, ML security, MCP security, red teaming, and AI-aware professional training.
It can be sold as a readiness program, not only as a course.

Course Overview

The objective is to help organizations turn AI governance from a policy document into a functioning operating model with risk classification, controls, evidence, approval workflows, monitoring, and board-level reporting.

The course will deliberately avoid being a generic AI governance or ethics course. The course focus on operationalizing governance across real enterprise AI use cases including GenAI, copilots, RAG systems, agentic AI workflows, ML models, third-party AI vendors, and shadow AI.

Who Should Attend

CISOs and security leaders :

Why They Need It : Need to govern AI usage and security risk across the enterprise.

Course Value : Practical controls, risk metrics, readiness reporting, and security governance.

GRC and risk teams :

Why They Need It : Need a repeatable AI risk and control model.

Course Value : AI inventory, risk register, control mapping, and evidence workflow.

Legal and compliance teams :

Why They Need It : Need to prepare for regulatory expectations and internal accountability.

Course Value : EU AI Act readiness, ISO 42001 alignment, evidence and accountability structures.

AI/product owners :

Why They Need It : Need to launch AI safely without slowing innovation.

Course Value : Approval workflows, human oversight, risk acceptance, and lifecycle controls.

Privacy and data teams :

Why They Need It : Need to manage data, privacy, and AI usage risks.

Course Value : Privacy risk integration inside the governance model.

Internal audit :

Why They Need It : Need to evaluate whether AI controls exist and operate effectively.

Course Value : Audit evidence, control testing approach, and governance maturity indicators.

Course Modules

MODULE 1
Module 1: AI Governance Foundations

Governance concepts, AI lifecycle, roles, ownership, risk accountability, and why governance must include security, privacy, safety, compliance, and operational controls.

MODULE 2
Module 2: Regulatory and Standards Landscape

Practical understanding of the major frameworks and how they influence governance design.

MODULE 3
Module 3: AI Inventory and Risk Classification

How to identify, register, classify, and prioritize AI systems across the organization.

MODULE 4
Module 4: Building the AI Governance Operating Model

How to turn AI governance into a working enterprise process.

MODULE 5
Module 5: AI Risk Assessment in Practice

Hands-on approach to evaluating AI risks across security, privacy, safety, reliability, compliance, and business impact.

MODULE 6
Module 6: Governance for Generative AI and Copilots

Governance controls for enterprise GenAI usage and productivity tools.

MODULE 7
Module 7: Governance for Agentic AI

Governance for autonomous and semi-autonomous AI systems with tools, memory, and workflow execution.

MODULE 8
Module 8: AI Governance Evidence and Audit Readiness

How to produce evidence that AI governance controls exist, are operating, and can be reviewed.

MODULE 9
Module 9: AI Governance Metrics and Board Reporting

How to communicate AI risk and readiness to executives and boards.

Capstone Project: AI Governance Readiness Assessment

Learners receive a fictional enterprise scenario and must produce an AI governance readiness pack.

Scenario

The fictional enterprise uses internal GenAI tools, Microsoft Copilot, a customer support chatbot, a RAG system connected to internal documents, a fraud detection ML model, an agentic workflow with tool access, third-party AI vendors, and marketing teams using image and video generation tools.

Required learner outputs

AI system inventory
AI system risk classification
AI risk register
Governance operating model
Policy gap assessment
Control recommendations
Evidence checklist
Board-level risk report