AI Security and Governance

Learn how AI systems are attacked, how to secure them across their lifecycle, and how to govern them using the EU AI Act, ISO/IEC 42001, the NIST AI Risk Management Framework and the UK AI Cyber Security Code of Practice.

Who this course is for: Security, IT, risk, compliance and data protection professionals, and managers responsible for AI adoption. Basic cyber security knowledge is helpful (for example ICCSO's Cyber Security Fundamentals). No machine-learning expertise is needed.

Self-paced online learning. Earn a Certificate of Completion on passing.

What you will learn

• Explain how large language models and AI systems work, and why they create new security risks
• Describe the main attacks on AI systems using the OWASP Top 10 for LLM Applications and MITRE ATLAS
• Apply security controls across the AI lifecycle, from design and data to deployment and monitoring
• Explain the risk tiers, key duties and timelines of the EU AI Act, including the 2026 Digital Omnibus changes
• Describe ISO/IEC 42001, the NIST AI Risk Management Framework and the UK AI Cyber Security Code of Practice
• Build an AI inventory, risk assessment, acceptable use policy and governance operating model

Course modules

• How AI systems work, and why they change security
• Attacks on AI systems
• Securing AI across its lifecycle
• The EU AI Act
• Standards and frameworks for AI governance
• Building an AI governance programme