- Duration
- 5 days
- Level
- Lead auditor
- Formats
- Virtual instructor-led, In-house
- CPD hours
- 35
Course overview
This five-day course develops the skills to lead first-, second- and third-party audits of an AI management system against ISO/IEC 42001:2023. You learn how to audit AI governance, risk and impact assessments, data and life-cycle controls and third-party AI, applying ISO 19011 audit principles and certification-body practice.
Why attend
- Lead AIMS audits as demand for ISO/IEC 42001 grows
- Understand what certification auditors look for in AI governance
- Combine AI and information security audit skills
- Practise on a realistic AI case study
Who should attend
- Experienced auditors extending into AI
- AI governance and assurance professionals
- Consultants
Learning objectives
- Plan and lead AIMS audits
- Evaluate AI risk and impact assessments
- Audit AI life-cycle and third-party controls
- Report and follow up findings
Course agenda
Day 1AI management systems and ISO/IEC 42001
- AI concepts, risks and regulation
- ISO/IEC 42001 requirements and Annex A
- Certification process
Day 2Audit principles and preparation
- Risk-based auditing for AI
- Stage 1 review of AI inventory, policy and assessments
- Audit plan and test plans
Day 3Conducting the audit
- Interviewing technical and business teams
- Sampling AI systems, data and records
- Drafting findings
Day 4Closing the audit
- Audit conclusions and report
- Follow-up and surveillance
- Managing an audit programme
Day 5Case study and exam
- Case study debrief
- Written exam
Prerequisites
Good understanding of ISO/IEC 42001 and audit experience in any management system.
Assessment and certificate
Written exam and case study. Continuous assessment of the audit case study and a 2-hour written exam on day 5, closed book. Pass mark 70%. Participants who pass receive a certificate of achievement. Options for accredited personnel certification exams are available on request.
Certificate: Certificate of achievement (on passing) or attendance from Secure iQube.
What is included
- Course slides and participant notes
- Practical workbook with exercises and case studies
- Templates you can adapt for your organisation
- Certificate of completion
- 30 days of post-course Q&A support by email
- Refreshments and lunch for classroom sessions
Dates
Public dates are announced regularly. Enquire below for the next date, or book a private session for your team on dates that suit you.