Course Outline
Artificial Intelligence in Public and Enterprise Operations: Strategic and Regulatory Dimensions
- Integration of AI into core operational functions: identifying opportunities and managing associated risks
- Executive accountability and stewardship in AI governance structures
- High-risk AI systems and their implications for organizational liability
AI Risk Categorization and the International Regulatory Environment
- EU AI Act: risk classifications, mandatory requirements, and enforcement mechanisms
- U.S. Executive Order on Artificial Intelligence and evolving federal and state regulatory directives
- Regulatory alignment with GDPR, HIPAA, and other relevant compliance frameworks
- Standards and guidelines: ISO/IEC 42001, NIST AI Risk Management Framework, and OECD AI Principles
Security Protocols and Supervisory Mechanisms for AI Systems
- AI security posture: analyzing threats, identifying vulnerabilities, and implementing protective controls
- Incident response strategies and breach notification protocols for AI-driven processes
- Establishing audit trails and traceability for model inputs, decision-making logic, and outputs
Responsible AI Procurement and Vendor Risk Management
- Conducting due diligence when acquiring AI technologies, including Large Language Models (LLMs) and Application Programming Interfaces (APIs)
- Essential contractual provisions: data sovereignty, model interpretability, and Service Level Agreements (SLAs)
- Validating vendor assertions: bias mitigation strategies, privacy assurances, and safety protocols
Internal Governance Structures and Organizational Control Mechanisms
- Formulating AI usage policies across various organizational units
- Establishing ethics review boards, risk assessment committees, and cross-functional oversight bodies
- Integrating training programs, documentation standards, and compliance workflows
Use Case Assessment and Risk Scenario Analysis
- Evaluating high-impact applications for government and enterprise use, such as personnel screening, financial scoring, and customer service automation
- Utilizing standardized tools and templates for conducting AI risk assessments
- Analyzing failure modes: misalignment, model drift, hallucinations, and discriminatory outcomes
Emerging Trends and Long-Term Strategic Considerations
- Projecting regulatory developments and trends toward global standardization
- Addressing specific risks and governance requirements for Generative AI systems
- Scaling AI operations responsibly within enterprise and public sector contexts
Conclusion and Actionable Next Steps
Requirements
- Familiarity with enterprise risk management, legal frameworks, or technology governance structures
- Professional experience in executive leadership, cybersecurity, or compliance oversight
- Prior technical expertise in AI development is not a prerequisite
Intended Audience
- Chief Information Security Officers (CISOs)
- Legal counsel and compliance officers
- Chief Technology Officers (CTOs)
Testimonials (3)
inventory and identifying the different risk exposures within AI
Gary Cook - Cybersecurity and Information Technology Risk Division
Course - Introduction to AI Trust, Risk, and Security Management (AI TRiSM)
I really enjoyed learning about AI attacks and the tools out there to begin practicing and actively using for security testing. I took a lot of knowledge away which I didn't have at the beginning and the course met what I hoped it would be. My favorite part shown from the training was Comet Browser and was amazed at what it could do. Definitely something will be looking into more. Overall it was a great course and enjoyed learning all OWASP GenAI Top 10.
Patrick Collins - Optum
Course - OWASP GenAI Security
The profesional knolage and the way how he presented it before us