AI Governance & Risk
For IT, governance, risk, and legal teams. Develop AI use policies, classify data, manage access and budgets, and prepare incident procedures. Help employees understand what they can do while giving the business practical controls for its AI rollout.
8 lessons · ~24 min
Estimated reading time.
- 2 lessons · ~6 min
G1Data and Model Boundaries
Every governance program starts with two boundaries: what data is sensitive enough to need a rule, and which models are actually allowed to touch it. This module sets both before anything else in this track makes sense.
- 3 lessons · ~9 min
G2Operational Controls
Turn governance intent into assigned responsibilities and reviewable controls. Map budget, data-retention, provider-access, and incident-response decisions to the systems and owners that can actually enforce them; do not assume a written policy is technically enforced.
- 1 lessons · ~3 min
G3Regulatory Mapping
Use current primary sources to identify which AI rules may apply in the EU or Vietnam, what depends on the system and organization, and when qualified legal review is needed. A lesson, training record, or checklist is not a compliance determination.
- 2 lessons · ~6 min
G4Data Processing and Provider Governance
Decide where business data may be processed, who manages provider access, and how to verify costs, revoked permissions and incident records.