Let’s make it work for you
Overview
This expert led course equips professionals with the specialist knowledge and practical skills needed to identify, assess and manage risks associated with artificial intelligence within modern organisations. As AI adoption accelerates, so too does the complexity of governance, compliance and operational risk. This course enables learners to confidently navigate these challenges.
Over two days, we explore how AI risk integrates into enterprise risk management frameworks, how to assess vulnerabilities across the AI lifecycle, and how to implement effective controls. Learners will develop a comprehensive understanding of AI technologies, associated threats, and the regulatory and ethical considerations that shape their use.
The course also prepares learners for the ISACA Advanced in AI Risk (AAIR) certification. The exam voucher is included and can be scheduled directly with ISACA after course completion.
Prerequisites
Learners should have a solid understanding of governance, risk management and information security principles. Prior experience working within risk or compliance functions is recommended.
This course is designed for experienced governance, risk and security professionals who want to extend their expertise into AI risk management. It is particularly relevant for individuals who hold certifications such as:
- Certified Information Systems Auditor (CISA)
- Certified Information Security Manager (CISM)
- Certified in Risk and Information Systems Control (CRISC)
- Certified in Governance, Risk and Compliance (CGRC)
- Certified Information Systems Security Professional (CISSP)
Delegates will learn how to
By the end of this course, learners will be able to:
- Evaluate risks associated with AI models and solutions, including design, algorithms, training, drift and lifecycle considerations
- Integrate AI risk management into enterprise risk management frameworks and programmes
- Develop and implement an AI risk management framework, including roles, responsibilities and risk tolerance
- Conduct structured risk assessments to identify and classify AI-related risks
- Recommend and justify appropriate risk treatment strategies
- Assess compliance with AI-related regulations, standards and legal requirements
- Embed AI risk considerations into governance structures, risk registers and control frameworks
- Evaluate AI use cases against organisational risk appetite
- Monitor and test processes to identify emerging AI risks
- Collaborate across functions to embed AI risk awareness and training
- Develop AI risk metrics and reporting for operational and executive audiences
- Conduct threat and vulnerability assessments on AI initiatives
- Integrate AI risk into incident management, business continuity and disaster recovery planning
- Continuously monitor the evolving AI risk landscape
- Evaluate and validate controls to ensure risks remain within acceptable tolerance
- Advise on AI-related contractual risks, including data usage and intellectual property
- Assess AI risk within supply chains and third-party relationships
- Address ethical, societal and ESG implications including bias, privacy and safety
- Leverage AI capabilities to enhance risk management processes
- Integrate AI risk considerations into change management processes
- Evaluate human oversight controls at critical decision points
Outline
Domain 1: AI risk governance and framework integration
This domain focuses on establishing strong governance foundations for AI risk management and aligning AI initiatives with organisational strategy.
- AI models, frameworks, strategies and use cases
- AI organisational processes and alignment
- AI ownership, oversight and accountability
- AI policies, procedures and organisational training
- AI regulatory compliance and legal considerations
- AI trustworthiness, ethics and societal implications including ESG
Domain 2: AI life cycle risk management
This domain explores how risk is managed across each stage of the AI lifecycle, from design through to decommissioning.
- AI design, development or procurement and documentation
- AI model training, testing and validation
- AI implementation, maintenance and decommissioning
- AI data and asset management
Domain 3: AI risk programme management
This domain focuses on operationalising AI risk management through structured programmes, controls and continuous monitoring.
- AI risk scenario identification and assessment including threats, vulnerabilities and attacks
- AI risk treatment strategies
- AI controls management including evaluation, selection and validation
- AI risk metrics, monitoring and reporting
- AI supply chain risk management including third-party resources
- AI incident response, business impact analysis, business continuity and disaster recovery
Exam and certification
This course prepares learners for the ISACA Advanced in AI Risk (AAIR) certification. An exam voucher is included and can be redeemed after the course. Exams are scheduled directly with ISACA.
Hands-on learning
Participants will:
- Analyse case studies simulating real-world AI risk challenges
- Perform structured walkthroughs and risk assessments
- Evaluate risk evidence using simulated data sets
- Apply concepts through guided scenarios on AI lifecycle, privacy, and governance
- Participate in instructor-led discussions to enhance cross-functional AI risk understanding
Product Access Change
Important Update to ISACA Product Access Periods
Effective 16 April 2026, ISACA is changing product access times from 12-months to 6-months across Exams, QAE, Online Review Courses, non-sponsored Webinars, and Virtual Workshops.
Access periods will change from 12 months to 6 months, as outlined below.
How the New Access Windows Work
- 1. Assignment & Redemption Window: Products must be assigned and redeemed within 6 months of the purchase date.
- 2. Access & Completion Window: Once redeemed, learners will have 6 months of access to use the product. This includes - Accessing learning content, Scheduling exams, Sitting exams (where applicable).
What This Means for You as a Learner
- Review Manuals – Learners will continue to have longterm access
- QAE Databases & Online Review Courses – Available for 6 months after redemption
- Exams – Must be scheduled and completed within 6 months of redemption
- We recommend redeeming products promptly and planning your study and exam schedule early to make the most of your access period.
Frequently asked questions
How can I create an account on myQA.com?
There are a number of ways to create an account. If you are a self-funder, simply select the "Create account" option on the login page.
If you have been booked onto a course by your company, you will receive a confirmation email. From this email, select "Sign into myQA" and you will be taken to the "Create account" page. Complete all of the details and select "Create account".
If you have the booking number you can also go here and select the "I have a booking number" option. Enter the booking reference and your surname. If the details match, you will be taken to the "Create account" page from where you can enter your details and confirm your account.
Find more answers to frequently asked questions in our FAQs: Bookings & Cancellations page.
How do QA’s virtual classroom courses work?
Our virtual classroom courses allow you to access award-winning classroom training, without leaving your home or office. Our learning professionals are specially trained on how to interact with remote attendees and our remote labs ensure all participants can take part in hands-on exercises wherever they are.
We use the WebEx video conferencing platform by Cisco. Before you book, check that you meet the WebEx system requirements and run a test meeting to ensure the software is compatible with your firewall settings. If it doesn’t work, try adjusting your settings or contact your IT department about permitting the website.
How do QA’s online courses work?
QA online courses, also commonly known as distance learning courses or elearning courses, take the form of interactive software designed for individual learning, but you will also have access to full support from our subject-matter experts for the duration of your course. When you book a QA online learning course you will receive immediate access to it through our e-learning platform and you can start to learn straight away, from any compatible device. Access to the online learning platform is valid for one year from the booking date.
All courses are built around case studies and presented in an engaging format, which includes storytelling elements, video, audio and humour. Every case study is supported by sample documents and a collection of Knowledge Nuggets that provide more in-depth detail on the wider processes.
When will I receive my joining instructions?
Joining instructions for QA courses are sent two weeks prior to the course start date, or immediately if the booking is confirmed within this timeframe. For course bookings made via QA but delivered by a third-party supplier, joining instructions are sent to attendees prior to the training course, but timescales vary depending on each supplier’s terms. Read more FAQs.
When will I receive my certificate?
Certificates of Achievement are issued at the end the course, either as a hard copy or via email. Read more here.