Ungoverned AI use can create audit gaps, security exposure, and legal risk before most organizations even know it exists. This course shows how to build an auditable AI governance and risk program around inventory, evidence-based assessment, control design, and ongoing review. It is aimed at CISOs, security teams, IT leaders, and compliance owners who need a practical way to decide what AI is allowed, what must be controlled, and what proof must exist when auditors or regulators ask.
The course covers discovering shadow AI exposure, choosing how NIST AI RMF and ISO/IEC 42001 work together, and building an AI inventory with intake evidence. It also covers repeatable risk assessment, control design across governance, data, model, security, oversight, monitoring, and vendors, plus access boundaries, incident handling, and management review.