Artificial Intelligence Governance and Technology Risk
Foundation1 dayGovernance, Assurance & Integrity
Programme overview
For organisations adopting artificial intelligence tools faster than they are governing them. Covers what AI systems are being used in your organisation already, the risks they introduce, and a proportionate governance framework drawing on ISO 42001 and the NIST AI Risk Management Framework. Includes the intersection with data protection, and specific coverage of AI in credit decisioning and AML monitoring.
Who should attend
Executives and directors, risk and compliance officers, ICT and information security managers, data protection and information officers, internal auditors, heads of innovation and digital, and HR leaders deploying AI in recruitment.
Sectors
Banks and fintech, insurers, telecommunications, public enterprises, professional firms, any organisation deploying AI tools.
Modules
- What is actually in use: shadow AI, embedded vendor AI, and building an AI inventory
- The risk landscape: bias and discrimination, hallucination and accuracy, explainability, data leakage, model drift, vendor and concentration risk, intellectual property
- The regulatory direction: the EU AI Act as a de facto standard, ISO 42001, the NIST AI RMF, and where African regulators are heading
- AI and data protection: lawful basis, automated decision making, cross border processing to model providers
- Designing a proportionate AI governance framework: policy, acceptable use, approval gates, human oversight
- Risk classification of AI use cases and matching controls to classification
- Third party AI and model vendors: due diligence and contracting
- Sector applications and their specific risks: credit scoring and adverse action, AML transaction monitoring and alert triage, insurance underwriting, recruitment screening
- Auditing an AI system: what assurance over AI looks like
- Building the AI use case register and the first version of your AI policy
Learning outcomes
On completion delegates will be able to:
- Build an inventory of AI use in your organisation
- Identify and classify AI specific risks
- Design a proportionate AI governance framework
- Assess an AI vendor
- Explain AI risk and oversight duties to a board
Tools and templates provided
- AI use case inventory template
- AI risk classification matrix
- AI acceptable use policy template
- AI vendor due diligence questionnaire
- Board briefing note template on AI risk
Assessment and certification
Use case classification exercise and a policy drafting workshop.
Certificate of Completion.