AI GRCAPractitioner Programme
PRACTITIONER PROGRAMME

AI Governance, Risk, Compliance & Assurance Practitioner Programme

Twenty-four module assignments from AI foundations to a practitioner viva. Each asks for a professional decision and a traceable evidence contribution. Teaching materials are published stage by stage.

3 of 24 lessons published

Every module's Knowledge Check, Practitioner Lab and assignment are open now. Lessons follow stage by stage.

See the programme map: what you learn, practise, test and evidence in each module

Stage 1 · Foundation3 of 4 lessons published

Describe AI systems, recognise harm and understand the governance and legal landscape.

  1. Module 1AI Foundations for GovernanceFoundationsAIAssignment: System description and actor mapLesson available
  2. Module 2Responsible AI, Trustworthy AI & HarmPrinciplesAI · HireAIAssignment: Stakeholder and harm analysisLesson available
  3. Module 3GRC & Assurance BasicsBankFraud AIAssignment: BankFraud AI Risk & Controls AssessmentLesson available
  4. Module 4AI and the Wider Legal LandscapeLegalAIAssignment: Legal-risk screen and counsel questionsLesson to follow
Stage 2 · Risk & GovernanceLessons to follow

Apply the NIST AI Risk Management Framework and assess generative and agentic AI risk.

  1. Module 5: NIST AI RMF & OECD Principles
  2. Module 6: NIST GOVERN
  3. Module 7: NIST MAP
  4. Module 8: NIST MEASURE
  5. Module 9: NIST MANAGE & Risk Treatment
  6. Module 10: GenAI, RAG & LLM Application Risk
  7. Module 11: Agentic AI, Prompt Injection & Security
Stage 3 · Management SystemsLessons to follow

Build an ISO/IEC 42001 AI management system and run impact assessments.

  1. Module 12: ISO AI Standards
  2. Module 13: ISO/IEC 42001 Foundations
  3. Module 14: Clause 4: Context
  4. Module 15: Clauses 5–6: Leadership & Planning
  5. Module 16: Clauses 7–10 & Annex A
Stage 4 · Regulation & ControlsLessons to follow

Classify under the EU AI Act, protect privacy, design controls and test assurance evidence.

  1. Module 17: EU AI Act & Global Landscape
  2. Module 18: High-Risk AI, GPAI, Timeline & Evidence
  3. Module 19: UK GDPR, DUAA, DPIA & AI Privacy
  4. Module 20: COSO Internal Control Foundations
  5. Module 21: Control Testing, Assurance & Audit Readiness
Stage 5 · Operating ModelLessons to follow

Run AI governance end to end across suppliers, monitoring and sector decisions.

  1. Module 22: Integrated AI Governance Operating Model
  2. Module 23: Sector Cases & Practitioner Judgement
Stage 6 · Final Practitioner AssessmentLessons to follow

Bring the whole portfolio together and defend a governance recommendation.

  1. Module 24: Mock Exam, Capstone & Viva

Your programme

Loading your programme…