The Academy
The certification proves you know it. The Academy is where you learn to do it.
Practitioner training in trust governance for the people responsible for putting it to work. Every course teaches a responsibility you would hold in a real role, the way it is carried out in a small organization and in an enterprise, and ends with something you built and keep.
AI Governance11 courses 
Applied AI at Work11 courses 
Audit & Assurance Operations8 courses 
Cybersecurity & Threat8 courses 
Data Governance3 courses 
Digital Trust Foundations3 courses 
Governance, Risk & Compliance10 courses 
Practitioner Methods4 courses 
Privacy & Data Protection12 courses 
Risk Management4 courses 
Third-Party & Supply Chain Risk10 courses 
Trust & Assurance3 courses How a course works
Six modules, two realities, one thing you keep.
Every practitioner course follows the same arc. Here is one of them, exactly as it runs.
Risk Assessment as a Craft: Scoping, Scenarios and Judgment
Good risk assessment is judgment, not a spreadsheet. Scope an assessment, build realistic scenarios and write down assumptions others can challenge.
- 1The obligation16 min
- 2Same obligation, two realities14 min
- 3The method20 min
- 4Lab: early-stage and SME120 min
- 5Lab: enterprise150 min
- 6Artifact and assessment20 min
The two labs are the same obligation carried out twice: once with one owner and few controls, once with a function and a committee. Most practitioners work in both.
- Scope an assessment so it answers a real business question
- Build scenarios around threats, assets and consequences
- State your assumptions so others can test them
- Write conclusions that lead to a decision
Twelve domains
Trust governance, taught as one discipline.
A privacy obligation lands on a vendor contract, a security control becomes audit evidence, and an AI deployment raises all of them at once. The courses are organized the way the work is.
11 courses · 1 included
AI Governance
- AI Inventory and Use-Case Intake in Practice
- AI Risk and Impact Assessment: NIST AI RMF and EU AI Act Tiers Applied
- Third-Party AI and Model Vendor Governance
11 courses
Applied AI at Work
- Practical Application of AI in Marketing
- Practical Application of AI in Sales
- Practical Application of AI in Accounting
8 courses
Audit & Assurance Operations
- AI in Audit and Assurance: Sampling, Evidence and Workpapers
- Owning a Control: Accountability, Delegation and Follow-Through
- Populations, Completeness and Sampling
8 courses
Cybersecurity & Threat
- AI in Security Operations: Triage and Detection
- AI-Assisted Vulnerability Remediation: SAST, Secrets and SCA
- Software Supply Chain: SBOMs, VEX and Component Monitoring in Practice
3 courses · 1 included
Data Governance
- Data Classification and Handling Rules People Follow
- Data Mapping and Discovery: Connectors, Owners and Drift
- Secure Data Sharing: Data Rooms, Remanence and What People Miss
3 courses · 3 included
Digital Trust Foundations
- What Digital Trust Means in Your Job
- Ethics and Judgment Calls for Practitioners
- Reading a Regulation Without a Lawyer
10 courses
Governance, Risk & Compliance
- AI in Compliance Mapping: Crosswalks and Gap Analysis
- SOC 2 From the Inside: Scoping, Ownership, Evidence and the Auditor
- ISO 27001 Implementation, Not Interpretation
4 courses
Practitioner Methods
- A Risk Register Executives Use
- Findings That Get Fixed: Task, Remediation and Evidence Management
- Digital Trust Metrics and Board Reporting
12 courses · 2 included
Privacy & Data Protection
- AI in Privacy Operations: Requests, Records and Notices
- GDPR in Practice: From Articles to an Operating Program
- US State Privacy Laws in Practice: CCPA/CPRA and the Rest
4 courses
Risk Management
- Risk Assessment as a Craft: Scoping, Scenarios and Judgment
- Quantifying Risk: From Heat Maps to Money
- Treatment, Acceptance and Exceptions That Expire
10 courses
Third-Party & Supply Chain Risk
- AI in Third-Party Risk: Questionnaires and Evidence
- Building a Third-Party Risk Program: From Zero and At Scale
- Reading a SOC 2 Report: Opinion, Scope, Exceptions, CUECs and Subservice Organizations
3 courses
Trust & Assurance
- Building and Running a Trust Center
- Program Attestations and Certificates of Diligence for Buyers, Insurers and Regulators
- M&A Cyber Diligence: Buy Side and Sell Side
What you leave with
Working documents, not completion records.
Each course ends with something you built: a register, an assessment, a plan. These are the 21 templates the courses use, yours to adapt for the role you hold or the one you want.
From courses to credentials
Learn the work, then prove it.
Courses earn certificates and learning credits (ALCs). Credentials are earned on top of them, by graded course work and a scenario exam, and every one carries an ID anyone can verify.
The common ground: what digital trust work is, ethics, and reading a regulation.
The core credential across governance, risk, privacy, security, third parties and assurance. A year of experience, or the OPS-290 capstone.
Privacy and data governance in depth.
Third-party and supply chain risk, assurance and contracts.
AI governance, risk and oversight.
Included with Associate Membership
7 courses open to every member.
Associate Membership opens these courses, the foundations, the glossary, DeepDive and the open exam pathways. Practitioner membership opens the full catalog and the policy and standard templates.
AIG-201AI Inventory and Use-Case Intake in Practice DGV-230Secure Data Sharing: Data Rooms, Remanence and What People Miss DTF-101What Digital Trust Means in Your Job DTF-110Ethics and Judgment Calls for Practitioners DTF-120Reading a Regulation Without a Lawyer PRV-202US State Privacy Laws in Practice: CCPA/CPRA and the Rest PRV-240Privacy in Marketing: Consent, Lists and Campaign Compliance