Business Free course · Certificate included
AI Governance & Regulation: EU AI Act, NIST AI RMF and ISO/IEC 42001
Classify AI uses, meet EU AI Act duties, apply NIST and ISO/IEC 42001, and build a practical governance pack for your business
- Intermediate
- 7 h 36 min
- 17 lessons in 7 modules
- 2 h 26 min of video lectures
- Updated Sep 2026
About this course
AI is now regulated, audited and asked about in every serious procurement. This intermediate course turns the EU AI Act, the NIST AI Risk Management Framework and ISO/IEC 42001 into practical controls for businesses, agencies and marketing teams. You will classify AI uses by risk, spot prohibited practices, understand high-risk and general-purpose AI obligations, and apply transparency duties for chatbots, synthetic media and deepfakes, using the application dates as amended by the 2026 Digital Omnibus. You will compare the UK, US, UAE, Saudi and Pakistani approaches, write an AI policy people follow, build an AI inventory and impact assessments, run vendor due diligence, and handle marketing-specific rules on advertising disclosure and data protection. The capstone produces a complete AI governance pack for an SME. Educational content, not legal advice.
Tools you’ll use
- EU AI Act
- NIST AI RMF
- NIST AI 600-1
- ISO/IEC 42001
- ISO/IEC 42005
- GPAI Code of Practice
- C2PA Content Credentials
Skills
- AI governance
- EU AI Act compliance
- NIST AI RMF
- ISO/IEC 42001
- AI risk assessment
- AI vendor due diligence
- AI marketing compliance
What you’ll be able to do
- Classify AI use cases under the EU AI Act by role and risk tier, with documented reasoning
- Apply prohibited-practice, high-risk, GPAI and Article 50 transparency rules using current application dates
- Structure AI risk work with the NIST AI RMF and its Generative AI Profile
- Scope an ISO/IEC 42001 AI management system and draft a Statement of Applicability
- Compare UK, US, UAE, Saudi and Pakistani approaches and run one multi-jurisdiction program
- Write an AI policy, inventory, impact assessments and vendor due-diligence records
- Apply advertising disclosure, synthetic media labeling and data protection rules to AI marketing
- Assemble and present a proportionate AI governance pack for an SME
Recommended first
Curriculum
Syllabus
- Modules
- 7
- Lessons
- 17
- Reading time
- 4.5 h
- Assessment questions
- 25
Why AI governance matters now, the vocabulary regulators use, and how the EU AI Act is structured around roles and risk.
- Why AI governance matters nowVideo lecture, 9′14 min
- How the EU AI Act is built: scope, roles and risk tiersVideo lecture, 9′16 min
Prohibited practices, AI literacy, high-risk obligations, general-purpose AI models, transparency duties, and the application timeline after the 2026 Digital Omnibus.
- Prohibited practices and the AI literacy dutyVideo lecture, 9′14 min
- High-risk AI systems: classification and obligationsVideo lecture, 9′18 min
- General-purpose AI models and the codes of practiceVideo lecture, 9′15 min
- Transparency duties: chatbots, synthetic content and deepfakesVideo lecture, 9′16 min
- Timeline, enforcement and the 2026 Digital OmnibusVideo lecture, 8′13 min
Use the NIST AI Risk Management Framework and its Generative AI Profile to structure risk work, and ISO/IEC 42001 to run an auditable AI management system.
- NIST AI RMF and the Generative AI ProfileVideo lecture, 8′16 min
- ISO/IEC 42001: running an AI management systemVideo lecture, 8′16 min
How the UK, US, UAE, Saudi Arabia and Pakistan approach AI, and how to run one governance program across several jurisdictions.
- The UK and US approachesVideo lecture, 9′15 min
- The UAE, Saudi Arabia and PakistanVideo lecture, 8′14 min
Write an AI policy people follow, build an AI inventory with impact assessments, and run model and vendor due diligence.
- Writing an AI policy people actually followVideo lecture, 9′15 min
- AI inventories and impact assessmentsVideo lecture, 8′16 min
- Model and vendor due diligenceVideo lecture, 8′15 min
Advertising disclosure, synthetic media labeling, platform policies, influencer rules and how data protection law interacts with AI in marketing.
- AI in advertising: disclosure, synthetic media and platform rulesVideo lecture, 9′16 min
- Data protection and AI: GDPR and its cousinsVideo lecture, 9′16 min
Assemble a complete, proportionate AI governance pack for a real or realistic small business.
- Capstone: build an AI governance pack for an SMEVideo lecture, 8′25 min
- Final assessment
Your certificate
Finish with a credential anyone can check
Earn the Certified AI Governance Practitioner badge: The holder can classify AI uses under the EU AI Act, apply prohibited-practice, high-risk, general-purpose AI and transparency duties with current dates, use the NIST AI RMF and ISO/IEC 42001, navigate UK, US, Gulf and Pakistani approaches, and build a proportionate AI governance pack with policy, inventory, impact assessments, vendor due diligence and marketing compliance controls.
Completed all lessons and scored at least 80% on the final assessment.
- A public verification page
- A PDF certificate to download
- An Open Badge you can share
- One click to your LinkedIn profile
Final assessment
- 25questions drawn from a larger pool
- 40 mintime limit
- 80%pass mark
- 3attempts per 24 hours
Start learning today. It’s free.
Every lesson is free to read. A free account saves your progress, unlocks the final assessment and issues your certificate.