--- title: "AI Governance & Regulation: EU AI Act, NIST AI RMF and…" description: "Classify AI uses, meet EU AI Act duties, apply NIST and ISO/IEC 42001, and build a practical governance pack for your business" url: https://optimizeall.com/learn/ai-governance-eu-ai-act updated: 2026-10-05 --- Business · Intermediate · 456 minutes · free · updated Sep 2026 # AI Governance & Regulation: EU AI Act, NIST AI RMF and ISO/IEC 42001 Classify AI uses, meet EU AI Act duties, apply NIST and ISO/IEC 42001, and build a practical governance pack for your business - **Lessons:** 17 in 7 modules - **Video lectures:** 17 lectures, 146 minutes - **Updated:** Sep 2026 ## Tools you'll use - EU AI Act - NIST AI RMF - NIST AI 600-1 - ISO/IEC 42001 - ISO/IEC 42005 - GPAI Code of Practice - C2PA Content Credentials [Start the course](https://optimizeall.com/learn/ai-governance-eu-ai-act/why-ai-governance-now) ## About this course AI is now regulated, audited and asked about in every serious procurement. This intermediate course turns the EU AI Act, the NIST AI Risk Management Framework and ISO/IEC 42001 into practical controls for businesses, agencies and marketing teams. You will classify AI uses by risk, spot prohibited practices, understand high-risk and general-purpose AI obligations, and apply transparency duties for chatbots, synthetic media and deepfakes, using the application dates as amended by the 2026 Digital Omnibus. You will compare the UK, US, UAE, Saudi and Pakistani approaches, write an AI policy people follow, build an AI inventory and impact assessments, run vendor due diligence, and handle marketing-specific rules on advertising disclosure and data protection. The capstone produces a complete AI governance pack for an SME. Educational content, not legal advice. ## What you will learn - Classify AI use cases under the EU AI Act by role and risk tier, with documented reasoning - Apply prohibited-practice, high-risk, GPAI and Article 50 transparency rules using current application dates - Structure AI risk work with the NIST AI RMF and its Generative AI Profile - Scope an ISO/IEC 42001 AI management system and draft a Statement of Applicability - Compare UK, US, UAE, Saudi and Pakistani approaches and run one multi-jurisdiction program - Write an AI policy, inventory, impact assessments and vendor due-diligence records - Apply advertising disclosure, synthetic media labeling and data protection rules to AI marketing - Assemble and present a proportionate AI governance pack for an SME ## Before you start - [Responsible AI, Disclosure & Compliance](https://optimizeall.com/learn/responsible-ai-disclosure-and-compliance) ## Course content ### Foundations of AI governance Why AI governance matters now, the vocabulary regulators use, and how the EU AI Act is structured around roles and risk. - [Why AI governance matters now](https://optimizeall.com/learn/ai-governance-eu-ai-act/why-ai-governance-now): 14 min - [How the EU AI Act is built: scope, roles and risk tiers](https://optimizeall.com/learn/ai-governance-eu-ai-act/eu-ai-act-architecture): 16 min ### EU AI Act deep dive Prohibited practices, AI literacy, high-risk obligations, general-purpose AI models, transparency duties, and the application timeline after the 2026 Digital Omnibus. - [Prohibited practices and the AI literacy duty](https://optimizeall.com/learn/ai-governance-eu-ai-act/prohibited-practices-and-ai-literacy): 14 min - [High-risk AI systems: classification and obligations](https://optimizeall.com/learn/ai-governance-eu-ai-act/high-risk-ai-obligations): 18 min - [General-purpose AI models and the codes of practice](https://optimizeall.com/learn/ai-governance-eu-ai-act/gpai-models-and-codes-of-practice): 15 min - [Transparency duties: chatbots, synthetic content and deepfakes](https://optimizeall.com/learn/ai-governance-eu-ai-act/transparency-duties-article-50): 16 min - [Timeline, enforcement and the 2026 Digital Omnibus](https://optimizeall.com/learn/ai-governance-eu-ai-act/timeline-enforcement-and-the-omnibus): 13 min ### Frameworks: NIST AI RMF and ISO/IEC 42001 Use the NIST AI Risk Management Framework and its Generative AI Profile to structure risk work, and ISO/IEC 42001 to run an auditable AI management system. - [NIST AI RMF and the Generative AI Profile](https://optimizeall.com/learn/ai-governance-eu-ai-act/nist-ai-rmf-and-genai-profile): 16 min - [ISO/IEC 42001: running an AI management system](https://optimizeall.com/learn/ai-governance-eu-ai-act/iso-iec-42001-ai-management-system): 16 min ### Beyond the EU: UK, US, Gulf and Pakistan How the UK, US, UAE, Saudi Arabia and Pakistan approach AI, and how to run one governance program across several jurisdictions. - [The UK and US approaches](https://optimizeall.com/learn/ai-governance-eu-ai-act/uk-and-us-approaches): 15 min - [The UAE, Saudi Arabia and Pakistan](https://optimizeall.com/learn/ai-governance-eu-ai-act/gulf-and-pakistan-approaches): 14 min ### Operating AI governance in a company Write an AI policy people follow, build an AI inventory with impact assessments, and run model and vendor due diligence. - [Writing an AI policy people actually follow](https://optimizeall.com/learn/ai-governance-eu-ai-act/writing-an-ai-policy): 15 min - [AI inventories and impact assessments](https://optimizeall.com/learn/ai-governance-eu-ai-act/ai-inventory-and-impact-assessments): 16 min - [Model and vendor due diligence](https://optimizeall.com/learn/ai-governance-eu-ai-act/model-and-vendor-due-diligence): 15 min ### Marketing-specific AI compliance Advertising disclosure, synthetic media labeling, platform policies, influencer rules and how data protection law interacts with AI in marketing. - [AI in advertising: disclosure, synthetic media and platform rules](https://optimizeall.com/learn/ai-governance-eu-ai-act/ai-in-advertising-and-synthetic-media): 16 min - [Data protection and AI: GDPR and its cousins](https://optimizeall.com/learn/ai-governance-eu-ai-act/data-protection-and-ai-in-marketing): 16 min ### Capstone: an AI governance pack for an SME Assemble a complete, proportionate AI governance pack for a real or realistic small business. - [Capstone: build an AI governance pack for an SME](https://optimizeall.com/learn/ai-governance-eu-ai-act/capstone-build-an-sme-governance-pack): 25 min ## Certificate: Certified AI Governance Practitioner The holder can classify AI uses under the EU AI Act, apply prohibited-practice, high-risk, general-purpose AI and transparency duties with current dates, use the NIST AI RMF and ISO/IEC 42001, navigate UK, US, Gulf and Pakistani approaches, and build a proportionate AI governance pack with policy, inventory, impact assessments, vendor due diligence and marketing compliance controls. - **Final assessment:** 25 questions, 40 minutes - **Passing score:** 80%