Skip to content
Neural Soft

Governance, compliance and security

AI governance and compliance course

A practical framework for using AI in an orderly way and meeting the AI Act without stifling innovation.

The EU AI Act (Regulation (EU) 2024/1689) is already being applied: AI literacy and the prohibitions since February 2025 and transparency since August 2026, while the high-risk obligations arrive in December 2027 and August 2028 after the Digital Omnibus. This course explains what affects your company and how to get organised.

The approach is practical: inventory the AI in use, classify it by risk level, assign owners, write a proportionate usage policy and prepare a realistic compliance plan. No unnecessary red tape and no holding teams back.

For a first overview, read our guide AI Act for SMEs.

What you will learn

  • Understand the EU AI Act obligations according to the company's role
  • Inventory and classify AI systems by risk level
  • Design a proportionate usage policy and governance model
  • Apply transparency, human oversight and record-keeping
  • Prepare a compliance plan with realistic timelines

Syllabus

8 modules, from the fundamentals to the final project.

  1. The AI Act in context

    • Purpose, scope and key definitions
    • Provider, deployer, importer and distributor
    • Application timeline after the Digital Omnibus
  2. Risk levels

    • Prohibited practices
    • High-risk systems (Annexes I and III)
    • Transparency obligations and general-purpose models
  3. Inventory and classification

    • Finding the AI already in use, including unauthorised use
    • A fact sheet for each system
    • Workshop: classifying real cases
  4. Obligations that already apply

    • AI literacy (Article 4)
    • Transparency for chatbots and synthetic content (Article 50)
    • Evidence worth keeping
  5. High risk as a deployer

    • Use in line with instructions and human oversight
    • Logs, incidents and informing workers and affected people
    • Fundamental rights impact assessment
  6. Governance model

    • Roles, committee and responsibilities
    • AI usage policy
    • Approving new tools and vendors
  7. Links with other rules

    • GDPR and impact assessments
    • ISO/IEC 42001 as a management system
    • Penalties and the supervisory authority (AESIA in Spain)
  8. Compliance plan

    • Priorities by risk and deadline
    • Indicators and periodic review

Tools you will practise with

  • AI system inventory template
  • Risk classification matrix
  • AI usage policy template

Hands-on project

You build the inventory and classification of your organisation's AI systems (or a sample case), write the usage policy and prepare a compliance plan with owners and deadlines.

Requirements

  • No legal or technical background needed.

Other courses

Where it is applied

  • AI HR assistant for employees

    An assistant that answers staff questions about holidays, leave, payslips and onboarding using the company's policies, and passes to HR anything that needs a person.

Related articles

Want this course for your team?

We adapt the content, length and format to your company.