Governance, compliance and security
AI governance and compliance course
A practical framework for using AI in an orderly way and meeting the AI Act without stifling innovation.
The EU AI Act (Regulation (EU) 2024/1689) is already being applied: AI literacy and the prohibitions since February 2025 and transparency since August 2026, while the high-risk obligations arrive in December 2027 and August 2028 after the Digital Omnibus. This course explains what affects your company and how to get organised.
The approach is practical: inventory the AI in use, classify it by risk level, assign owners, write a proportionate usage policy and prepare a realistic compliance plan. No unnecessary red tape and no holding teams back.
For a first overview, read our guide AI Act for SMEs.
What you will learn
- Understand the EU AI Act obligations according to the company's role
- Inventory and classify AI systems by risk level
- Design a proportionate usage policy and governance model
- Apply transparency, human oversight and record-keeping
- Prepare a compliance plan with realistic timelines
Syllabus
8 modules, from the fundamentals to the final project.
-
The AI Act in context
- Purpose, scope and key definitions
- Provider, deployer, importer and distributor
- Application timeline after the Digital Omnibus
-
Risk levels
- Prohibited practices
- High-risk systems (Annexes I and III)
- Transparency obligations and general-purpose models
-
Inventory and classification
- Finding the AI already in use, including unauthorised use
- A fact sheet for each system
- Workshop: classifying real cases
-
Obligations that already apply
- AI literacy (Article 4)
- Transparency for chatbots and synthetic content (Article 50)
- Evidence worth keeping
-
High risk as a deployer
- Use in line with instructions and human oversight
- Logs, incidents and informing workers and affected people
- Fundamental rights impact assessment
-
Governance model
- Roles, committee and responsibilities
- AI usage policy
- Approving new tools and vendors
-
Links with other rules
- GDPR and impact assessments
- ISO/IEC 42001 as a management system
- Penalties and the supervisory authority (AESIA in Spain)
-
Compliance plan
- Priorities by risk and deadline
- Indicators and periodic review
Tools you will practise with
- AI system inventory template
- Risk classification matrix
- AI usage policy template
Hands-on project
You build the inventory and classification of your organisation's AI systems (or a sample case), write the usage policy and prepare a compliance plan with owners and deadlines.
Requirements
- No legal or technical background needed.
Other courses
-
AI ethics and decision-making course
A practical method for deciding when and how to use AI responsibly.
- Duration: 4–6 hours
- Level: Beginner
-
Data protection and AI course (GDPR)
Use AI with personal data while complying with the GDPR by design.
- Duration: 6–8 hours
- Level: Intermediate
-
Generative AI security course: OWASP, risks and practical mitigations
Protect your AI applications from attacks and information leaks.
- Duration: 12 hours
- Level: Advanced
Where it is applied
-
AI HR assistant for employees
An assistant that answers staff questions about holidays, leave, payslips and onboarding using the company's policies, and passes to HR anything that needs a person.
Related articles
-
Regulation
An AI usage policy for your company: what to include and how to put it in place
What a company AI usage policy should include: approved tools, permitted data, human review, transparency and training, with a step-by-step plan.
5 min read
-
Regulation
The AI Act for SMEs: your obligations and how to prepare
Guide to the EU AI Act for SMEs: what affects you if you use AI, deadlines after the Digital Omnibus, penalties and a five-step action plan.
9 min read
Want this course for your team?
We adapt the content, length and format to your company.