AI Governance, Risk & Compliance (AI GRC)

What you will be able to do

• You will be able to name and explain the core categories of AI risk, bias, hallucination, privacy, and security, with concrete examples
• You will be able to apply the four functions of the NIST AI RMF (Govern, Map, Measure, Manage) to a real AI use case
• You will be able to explain how ISO/IEC 42001 establishes an AI Management System and how it relates to ISO 27001
• You will be able to classify an AI system into the correct EU AI Act risk tier and list the obligations that follow
• You will be able to design the building blocks of an AI governance program, including roles, policy, and an intake process
• You will be able to build and maintain an AI inventory that captures the data a governance program depends on
• You will be able to author a model card that documents an AI system's intended use, performance, and limitations
• You will be able to populate an AI risk register that ties identified risks to owners, treatments, and monitoring

What is inside

4 modules, 8 lessons. Each module ends in a graded quiz and most carry an assignment.

1. 01

   The AI Risk Landscape

   Before you can govern AI, you have to understand what can go wrong with it. This module maps the major categories of AI risk, bias and fairness, hallucination and reliability, privacy, and security, and explains why traditional IT controls only get you part of the way there.

   2 lessons · 5 quiz questions

2. 02

   Frameworks: NIST AI RMF and ISO/IEC 42001

   This module turns risk awareness into structured practice. You will learn the NIST AI Risk Management Framework, its four functions Govern, Map, Measure, and Manage, and ISO/IEC 42001, the management-system standard for AI. The assignment has you apply the RMF to a realistic use case.

   2 lessons · 5 quiz questions · assignment

3. 03

   Regulation: The EU AI Act

   This module covers the world's first comprehensive AI law. You will learn the EU AI Act's risk-based tiers, unacceptable, high, limited, and minimal, the obligations that attach to each, the special regime for general-purpose AI, and who has to comply.

   2 lessons · 5 quiz questions

4. 04

   Building an AI Governance Program

   This is where the course becomes operational. You will learn how to stand up an AI governance program, roles, policy, and an intake process, and how to build its three core artifacts: an AI inventory, model cards, and an AI risk register. The assignment has you produce these artifacts for a real scenario.

   2 lessons · 5 quiz questions · assignment