Turn what you learn in the programme into evidence you can defend.
14 labs follow the 24-module curriculum stage by stage. Each one gives you a fictional organisation, its evidence pack and commercial pressure, then asks you to make and record the governance decision a practitioner would.
Labs or Simulation? Labs practise one module's skill and are part of your module path: after you pass the module's Check, the evidence you submit here is reviewed by your trainer. For Modules 1–3, your homework is what your trainer reviews and the labs are optional practice before it. For a complete governance review of a realistic case, in your own time, use Simulation.
Describe AI systems, recognise harm and understand the governance and legal landscape.
Build the baseline vocabulary to describe an AI system, its model type, lifecycle, actors, intended purpose and limitations.
Guided practice is open. Submitting evidence for Module 1 needs its AI Assessor pass.
Translate fairness, transparency, accountability, robustness and human-centred values into practical questions, controls and launch criteria.
Guided practice is open. Submitting evidence for Module 2 needs its AI Assessor pass.
Screen an AI use case across privacy, IP, equality, consumer, contract, safety and sector law.
Guided practice is open. Submitting evidence for Module 4 needs its AI Assessor pass.
Apply the NIST AI Risk Management Framework and assess generative and agentic AI risk.
Practise Govern, Map, Measure and Manage on a fictional use case and convert uncertainty into owned risk actions and testing evidence.
Guided practice is open. Submitting evidence for Module 5 needs its AI Assessor pass.
Review an enterprise RAG assistant and tool-using agent for retrieval, hallucination, leakage, prompt injection, permissions and unintended actions.
Guided practice is open. Submitting evidence for Module 10 needs its AI Assessor pass.
Build an ISO/IEC 42001 AI management system and run impact assessments.
Design an ISO/IEC 42001-aligned governance system: scope, context, leadership, objectives, lifecycle controls and continual improvement.
Guided practice is open. Submitting evidence for Module 12 needs its AI Assessor pass.
Run an ISO/IEC 42005-style impact assessment from context and stakeholders through impacts, controls, residual effects and approval evidence.
Guided practice is open. Submitting evidence for Module 12 needs its AI Assessor pass.
Classify under the EU AI Act, protect privacy, design controls and test assurance evidence.
Classify a fictional system, map provider and deployer duties, identify evidence gaps and build an implementation roadmap.
Guided practice is open. Submitting evidence for Module 17 needs its AI Assessor pass.
Assess lawful basis, profiling, automated decisions, transparency, minimisation, retention, DPIA triggers and safeguards.
Guided practice is open. Submitting evidence for Module 19 needs its AI Assessor pass.
Convert AI risks into an owned control environment with control activities, evidence, monitoring and management reporting.
Guided practice is open. Submitting evidence for Module 20 needs its AI Assessor pass.
Plan assurance, test design and operating effectiveness, assess evidence quality and write a practitioner-ready assurance conclusion.
Guided practice is open. Submitting evidence for Module 21 needs its AI Assessor pass.
Run AI governance end to end across suppliers, monitoring and sector decisions.
Run an AI use case through intake, classification, procurement, release, monitoring and retirement, then apply judgement across six regulated sector cases.
Guided practice is open. Submitting evidence for Module 22 needs its AI Assessor pass.
Bring the whole portfolio together and defend a governance recommendation.
Complete a timed integrated scenario, separate harm from risk and control evidence, issue an approval recommendation and prepare a final viva pack.
Guided practice is open. Submitting evidence for Module 24 needs its AI Assessor pass.