Let’s make it work for you
Overview
This immersive Agentic AI security risk simulation scenario equips participants with the skills to navigate the emerging risks of autonomous AI systems operating across organisational functions. As organisations adopt AI systems capable of acting independently, such as approving loans, verifying identities, managing employees, controlling access, and processing payments, traditional cybersecurity and governance frameworks become insufficient.
Participants assume the role of an AI Operations Supervisor at a mid-sized UK bank undergoing aggressive AI transformation. They will respond to a major fraud incident while managing the friction caused by multiple Agentic AI systems acting at cross purposes. The simulation combines real-world scenarios with regulatory guidance, including the EU AI Act, ISO/IEC 42001, and NCSC Cyber Assessment Framework, enabling participants to identify architectural vulnerabilities and implement effective AI oversight.
Prerequisites
There are no prerequisites for this simulation, it is LLM agnostic. It is suitable for participants across all levels seeking practical experience in managing AI and Agentic AI system risks.
Target audience
This simulation is designed for:
- Security, risk, assurance, and governance professionals
- Privacy specialists, and DPO’s
- Security operations and IT leaders
- Business managers and decision-makers responsible for AI adoption
Learning Outcomes
By the end of this simulation, participants will be able to:
- Identify the difference between AI systems that recommend versus AI systems that act, and the associated risk implications
- Recognise circular trust vulnerabilities where human oversight depends on AI-generated reports
- Evaluate how multiple Agentic AI systems can work at cross purposes during crisis situations
- Apply regulatory frameworks, including EU AI Act Article 14, ISO/IEC 42001, and NCSC CAF, to NIST AI oversight design
- Assess biometric data collection risks and understand the permanent nature of biometric compromise
- Formulate appropriate responses when automated systems obstruct incident response
- Distinguish between attack vectors (how breaches occur) and root causes (architectural vulnerabilities)
Outline
Simulation introduction
- Overview of Agentic AI systems and their roles in modern organisations
- Understanding emerging risk categories beyond traditional cybersecurity
- Key principles of AI oversight and governance
Scenario setup: AI Operations Supervisor role
- Context: Mid-sized UK bank with extensive AI adoption and agentic services
- Incident briefing: Discovery of major fraud involving multiple AI systems
- Team composition and responsibilities
Managing AI risks in practice
- Identifying agentic AI versus advisory AI systems
- Detecting circular trust and reporting dependencies
- Assessing conflicts between concurrent AI systems
- Evaluating human oversight effectiveness
Regulatory frameworks and compliance
- EU AI Act Article 14: Human oversight for high-risk AI
- ISO/IEC 42001: AI Management Systems and risk assessment
- NCSC Cyber Assessment Framework B4.b: Independent monitoring
- GDPR Articles 9 & 34: Biometric data handling and breach notification
- ETSI EN 303 645 / 304 223: Biometric security standards
- ICO Employment Practices Code: Automated worker profiling
- ICO Agentic AI Futures Guidance: Context-aware AI decision-making
- NIS Regulations 2018: Threat intelligence sharing
Simulation exercises
- Hands-on scenario: Responding to fraud incidents with agentic AI systems
- Identifying architectural vulnerabilities and operational friction
- Cross-functional decision-making and collaboration
- Real-time feedback and scenario debrief
Lessons learned and wrap-up
- Human oversight beyond dashboards and AI reports
- Translating simulation insights into organisational AI risk management strategies
- Preparing for future agentic AI deployments
Exams and assessments
There are no formal exams for this simulation. Participants will engage in knowledge checks, scenario-based decisions, and interactive debriefs to consolidate learning outcomes.
Hands-on learning
The simulation includes:
- Gamified exercises placing participants in operational decision-making roles
- Scenario-based problem-solving with multiple AI systems
- Real-time guidance from instructors with expertise in AI risk and governance
- Debriefs highlighting regulatory application and organisational impact
QA is proud to be the UK partner for CyberFish Cyberpsychology Solutions.
Frequently asked questions
How can I create an account on myQA.com?
There are a number of ways to create an account. If you are a self-funder, simply select the "Create account" option on the login page.
If you have been booked onto a course by your company, you will receive a confirmation email. From this email, select "Sign into myQA" and you will be taken to the "Create account" page. Complete all of the details and select "Create account".
If you have the booking number you can also go here and select the "I have a booking number" option. Enter the booking reference and your surname. If the details match, you will be taken to the "Create account" page from where you can enter your details and confirm your account.
Find more answers to frequently asked questions in our FAQs: Bookings & Cancellations page.
How do QA’s virtual classroom courses work?
Our virtual classroom courses allow you to access award-winning classroom training, without leaving your home or office. Our learning professionals are specially trained on how to interact with remote attendees and our remote labs ensure all participants can take part in hands-on exercises wherever they are.
We use the WebEx video conferencing platform by Cisco. Before you book, check that you meet the WebEx system requirements and run a test meeting to ensure the software is compatible with your firewall settings. If it doesn’t work, try adjusting your settings or contact your IT department about permitting the website.
How do QA’s online courses work?
QA online courses, also commonly known as distance learning courses or elearning courses, take the form of interactive software designed for individual learning, but you will also have access to full support from our subject-matter experts for the duration of your course. When you book a QA online learning course you will receive immediate access to it through our e-learning platform and you can start to learn straight away, from any compatible device. Access to the online learning platform is valid for one year from the booking date.
All courses are built around case studies and presented in an engaging format, which includes storytelling elements, video, audio and humour. Every case study is supported by sample documents and a collection of Knowledge Nuggets that provide more in-depth detail on the wider processes.
When will I receive my joining instructions?
Joining instructions for QA courses are sent two weeks prior to the course start date, or immediately if the booking is confirmed within this timeframe. For course bookings made via QA but delivered by a third-party supplier, joining instructions are sent to attendees prior to the training course, but timescales vary depending on each supplier’s terms. Read more FAQs.
When will I receive my certificate?
Certificates of Achievement are issued at the end the course, either as a hard copy or via email. Read more here.