On-site or live virtual
At your offices anywhere in the world, or live virtual for distributed teams across time zones.
AI Security & Governance · Program
AI Governance & Compliance: ISO 42001, EU AI Act & Data Protection
Turn AI regulations and standards into one governance program your organisation can run, and evidence.
Delivered in partnership with
- Duration
- 1 day (overview) or 2 days (implementation)
- Format
- On-site or live virtual
- Group
- Up to 25 participants
- Audience
- Compliance, legal, risk, privacy, internal audit
Why this matters now
One program for every AI obligation
AI obligations are arriving from several directions at once. The EU AI Act can reach organisations outside the EU whose AI systems or outputs are used in the EU, and its AI literacy duty has applied since February 2025. Data protection laws in your markets, from GDPR and UK GDPR to India’s DPDP Act (most obligations apply by mid-2027), Singapore’s PDPA, the UAE’s PDPL, Canada’s PIPEDA and Australia’s Privacy Act, govern the personal data that flows into AI tools. ISO/IEC 42001 gives organisations a certifiable management system for AI, and the NIST AI RMF offers a voluntary reference for managing AI risk. Your compliance team needs one program that covers all of it, not four separate projects.
Who should attend
- Compliance, privacy and data protection officers
- Legal counsel and company secretaries
- Risk, internal audit and GRC teams
- Global teams and IT services firms serving EU, UK and US clients
What your team will be able to do
- Explain what the EU AI Act, ISO/IEC 42001, the NIST AI RMF and the data protection laws in your markets expect of your AI use
- Build an AI inventory and classify use cases by risk
- Draft an AI policy, an acceptable-use policy and an approval workflow
- Define AI controls and the evidence auditors will ask for
- Plan an AI governance roadmap with named owners
Program agenda
What we cover
Every module is tailored to your industry, your approved tools and your policies before delivery.
Request the full agendaThe AI regulatory map
The EU AI Act’s roles and timelines including the 2026 amendments, data protection laws across your markets (GDPR, UK GDPR, India’s DPDP Act, Singapore’s PDPA, the UAE’s PDPL, Canada’s PIPEDA, Australia’s Privacy Act), sector guidance for financial services and healthcare, and where they overlap.
Standards and frameworks
ISO/IEC 42001 (AI management system), the NIST AI RMF and its Generative AI Profile, and how they map to ISO 27001 and SOC 2.
AI inventory and risk classification
Finding the AI already in use, including shadow AI, and classifying use cases by risk.
Policies, controls and evidence
Policy templates, approval workflows, vendor questionnaires and audit-ready evidence.
Workshop: your governance roadmap
Two-day format: build your organisation’s AI governance roadmap with our facilitators.
How we deliver
Built around your organisation
Tailored to your organisation
Examples, exercises and policy content aligned with your sector and the tools you have approved.
Certificate and report
Certificates for participants and a completion report for HR, compliance and audit.
In partnership with AccuroAI
AI security training, taught on a real AI security platform
Our AI Security & Governance programs are delivered in partnership with AccuroAI, an enterprise AI security and governance platform covering shadow AI discovery, prompt data loss prevention, AI agent security and endpoint AI governance. Your teams learn the controls on a live platform, not on slides.
- Live demonstrations and hands-on labs on the AccuroAI platform
- Realistic scenarios: shadow AI, prompt data leakage and AI agent misuse
- Vendor-neutral skills: no purchase needed to attend, and the methods apply whatever tools you use
Useful resources from AccuroAI: AI security for compliance and legal teams and the free AI governance readiness assessment.
Explore the AI Security AcademyIs this legal advice?
No. It is practical training on frameworks and implementation. Your legal counsel should confirm interpretations for your business.
Do participants get templates?
Yes: an AI policy template, an AI acceptable-use policy template, an AI inventory sheet and a vendor AI questionnaire.
Can it be tailored to our sector?
Yes. We offer financial services, healthcare and IT services editions.
How is it priced?
We scope and quote after a discovery call. The quote depends on the one-day or two-day format, group size, location and the sector edition you choose. You receive a written proposal before you commit.
Request a proposal
Bring AI Governance & Compliance: ISO 42001, EU AI Act & Data Protection to your teams
Tell us about your teams and goals. We’ll set up a short discovery call, then send a scoped proposal.
Request a proposal
Or email info@prodinnov.co
Keep going
Related programs
With AccuroAI
AI Risk & Strategy for Leaders
A half-day briefing for CXOs and boards: where AI pays back, where it exposes you, and who owns it.
View program With AccuroAISafe AI at Work
Company-wide training on using ChatGPT, Copilot, Gemini and other AI tools productively, without leaking company or customer data.
View program With AccuroAIShadow AI & Prompt Data Leakage Defense
Hands-on workshop for security and IT teams: find unapproved AI, stop sensitive data in prompts, and respond to AI incidents.
View program