- Duration
- 5 days
- Level
- Implementer
- Formats
- Virtual instructor-led, In-house
- CPD hours
- 35
Course overview
This five-day course gives you the knowledge and skills to plan, implement, manage and maintain an artificial intelligence management system (AIMS) based on ISO/IEC 42001:2023. You learn how to govern AI responsibly across its life cycle: defining your role for each AI system, running AI risk and impact assessments, selecting Annex A controls, and preparing for certification, with practical links to the EU AI Act, the NIST AI RMF and ISO/IEC 27001.
Why attend
- Lead your organisation’s AI governance programme
- Turn responsible AI principles into auditable controls
- Understand how ISO/IEC 42001 supports EU AI Act and other regulatory obligations
- Learn AI risk and impact assessment methods you can use straight away
- Integrate AI governance with an existing ISO/IEC 27001 ISMS
Who should attend
- AI product leads and data science managers
- Risk, compliance and security professionals
- ISO 27001 practitioners extending to AI
Learning objectives
- Explain ISO/IEC 42001 requirements and how they relate to AI regulation
- Scope an AIMS and build an AI inventory
- Run AI risk and impact assessments
- Select and implement Annex A controls
- Prepare an organisation for certification
Course agenda
Day 1AI governance and initiating an AIMS
- AI concepts, benefits and risks
- Regulatory landscape: EU AI Act, NIST AI RMF and national guidance
- ISO/IEC 42001 structure and key terms
- Organisational context and roles: developer, provider, user
- Defining the AIMS scope and AI inventory
Day 2Planning the AIMS
- AI policy and responsible AI objectives
- Leadership, roles and the AI governance committee
- AI risk assessment (ISO/IEC 23894)
- AI system impact assessment (ISO/IEC 42005)
- Risk treatment and the Statement of Applicability
Day 3Implementing AI controls
- Annex A controls across the AI life cycle
- Data quality, provenance and data management
- Transparency and information for interested parties
- Human oversight and responsible use
- Third-party and supplier AI
Day 4Operating, monitoring and improving
- Operational planning and change control for AI systems
- Performance monitoring and AI incident handling
- Internal audit and management review
- Corrective action and continual improvement
- Preparing for certification
Day 5Case study and assessment
- Integrating with ISO/IEC 27001 and ISO/IEC 27701
- Case study review
- Written assessment
Prerequisites
A general understanding of AI concepts and management systems. No programming knowledge is required.
Assessment and certificate
Written assessment. A scenario-based written assessment on the final day, open book, covering the requirements and their practical application. Pass mark 70%. Participants who pass receive a certificate of achievement; others receive a certificate of attendance.
Certificate: Certificate of achievement (on passing) or attendance from Secure iQube.
What is included
- Course slides and participant notes
- Practical workbook with exercises and case studies
- Templates you can adapt for your organisation
- Certificate of completion
- 30 days of post-course Q&A support by email
- Refreshments and lunch for classroom sessions
Dates
Public dates are announced regularly. Enquire below for the next date, or book a private session for your team on dates that suit you.