Courses
Courses that leave you with real work done.
Each course is built around a task you do at work, like running a SOC 2, answering a breach, or putting AI to use safely. You finish with a working deliverable built on your own organization, whether you are a team of five or five thousand, and a certificate anyone can verify.
87courses
12domains
5credential paths
273ALCs to earn
7included with Associate Membership
The course mapEvery course, by domain. Pick a credential to light up the courses that count toward it.
Included with Associate MembershipPractitionerExecutive Practitioner
Concepts you hear but never learned Included
16 ten-minute lessons, included with Associate Membership. 0.25 ALC each, toward the Foundations Certificate. Open the series.
Bridge letterTPR · 10 minutes
CUECTPR · 10 minutes
Subservice organisation and carve-outTPR · 10 minutes
Global Privacy Control (GPC)PRV · 10 minutes
TCF and consent stringsPRV · 10 minutes
SBOM and VEXCYB · 10 minutes
Statement of ApplicabilityGRC · 10 minutes
ITGCAUD · 10 minutes
Legitimate interest and the balancing testPRV · 10 minutes
Article 28 processor termsPRV · 10 minutes
Business associate agreementPRV · 10 minutes
Risk acceptance and expiryRSK · 10 minutes
Type I versus Type IITPR · 10 minutes
Data processing agreement versus data protection addendumPRV · 10 minutes
Suppression listPRV · 10 minutes
Population and sampleAUD · 10 minutes
AI Governance
11 courses · 1 included with Associate MembershipAIG-201Included
AI Inventory and Use-Case Intake in Practice
You can't govern AI you don't know about. Find every AI system in use and set up an intake form product teams will actually fill in.
3 ALCs CATP
AIG-210Executive
AI Risk and Impact Assessment: NIST AI RMF and EU AI Act Tiers Applied
Before an AI system goes live, someone has to decide how risky it is and what that means. This course walks you through an impact assessment and an EU AI Act…
4 ALCs CATP
AIG-220Executive
Third-Party AI and Model Vendor Governance
Most of your AI risk arrives through vendors. Learn what to ask AI suppliers, which contract terms matter, and how to approve tools without grinding the…
3 ALCs CATP
AIG-230Practitioner
AI Acceptable Use and Policy That Engineers Follow
Most AI policies are ignored because they're vague. Write one engineers and staff will follow, with approval tiers and monitoring that fit how they work.
2 ALCs CATP
AIG-240Executive
Running an AI Management System to ISO/IEC 42001
ISO/IEC 42001 gives you a way to manage AI that certifiers and customers recognize. Stand up an AI management system and run it, not just write it down.
4 ALCs
AIG-250Executive
EU AI Act Obligations by Role
The EU AI Act puts different duties on providers, deployers and others. Work out which role you hold for each AI system and exactly what it requires, with the…
4 ALCs
AIG-260Executive
AI Documentation That Holds Up: Model Cards and Impact Assessments
Regulators, customers and auditors all want AI documentation, each for different reasons. Write model cards and impact assessments once, and keep them true as…
4 ALCs
AIG-270Executive
Testing and Red-Teaming AI Systems
Testing AI isn't like testing code. Set acceptance criteria before you test, red-team generative systems and make a release decision you can defend.
4 ALCs
AIG-280Executive
Monitoring AI in Production
AI systems change after launch as data drifts and vendors update models. Know what to watch, when to act, and who has the authority to switch a system off.
4 ALCs
AIG-290Executive
Governing Agentic AI: Permissions, Tools and Oversight
AI agents don't just answer, they act. Decide what an agent may do, control its tools and permissions, and stop it safely when something goes wrong.
4 ALCs
AIG-300Executive
Securing LLM Applications
Prompt injection will succeed eventually, so design for it. Threat model an LLM application and build controls that hold even when the model is fooled.
4 ALCs