AI Governance, Risk and Assurance

About this paper

An advanced examination for risk officers, security leaders, auditors and compliance engineers who are accountable for AI systems in production. It assesses AI risk framing, inventory and tiering, regulatory obligations at a conceptual level, meaningful human oversight, vendor assurance, and the evidence and metrics that demonstrate controls actually operate. Candidates should already own or audit governance processes for deployed AI.

What it covers

• AI risk framing: how probabilistic, drifting systems break classic IT risk assumptions
• Inventory and tiering: a system of record for AI use, and impact-based risk classification
• Regulatory landscape: risk-tiered obligations, transparency duties, and deployer responsibilities
• Oversight and documentation: meaningful human oversight, model cards, system cards and datasheets
• Third-party assurance: contracts, evidence and monitoring for hosted and vendor-embedded models
• Assurance in operation: audit evidence, incident classification, drift obligations and control metrics

How it is marked

• Questions and answer options are shuffled for every sitting.
• Multi-answer questions are marked as a set: you need all of the correct options and none of the wrong ones. There is no partial credit.
• You need 75% to pass.
• You can revisit and change any answer until you submit.
• Afterwards you see every question, the answer you gave, whether it was right, and the reasoning behind it. The answer key itself is never printed, so the paper stays worth sitting.
• You can re-sit the paper, but not immediately: there is a short wait between attempts.