Skip to content

Modulos Named in the Inaugural Gartner® Magic Quadrant™ for AI Governance PlatformsRead the

Press Release

AIG 201 · For compliance, risk, privacy and audit teams

AI Governance: Running an AI register

Finding the AI your organization already uses, sorting each system by the AI Act's tests, assessing an AI risk, controls and their evidence, ISO/IEC 42001 and the NIST AI RMF, monitoring and incidents, and reporting to management.

8 lessons · about 43 min · quiz · certificate

Course outline

Lessons

  1. 1Finding the AI your organization already usesDefining AI broadly enough to find every system · Where each kind of shadow AI leaves a trace · Deciding in writing what the register covers · What each entry in the register records · Keeping the register complete as things change5:54
  2. 2Sorting a system by the AI Act's testsRunning the AI Act's tests in a fixed order · Recording your organization's role for each system · The bans and transparency duties that apply now · How a system becomes high-risk under the AI Act · A recruiting assistant sorted test by test5:54
  3. 3Assessing an AI riskAgreeing the risk criteria before anyone scores · Assessing a system in the setting where it works · Which assessments the law asks for and from whom · Deciding the response and who accepts what remains · Recording each assessment and repeating it5:57
  4. 4Controls and the evidence behind themChoosing the controls each risk needs · Evidence that shows a control ran and who ran it · The records the AI Act asks each role to keep · Registration in the EU database and training records · Keeping evidence accurate and using it more than once5:56
  5. 5ISO/IEC 42001 and the NIST AI RMF in plain termsWhat ISO/IEC 42001 is and who can be certified · The clauses and annexes of ISO/IEC 42001 · What an ISO/IEC 42001 certificate does not show · The NIST AI RMF and using it with ISO/IEC 420015:47
  6. 6Monitoring and incidentsGiving every system a monitoring plan in its entry · Routing every signal back to the system's entry · What counts as a serious incident and who reports · Running one incident procedure for every clock · Taking a system out of use and closing the loop5:55
  7. 7Reporting to managementWhy management needs what the register knows · What the report shows and how complete it is · Telling management what is still not settled · The decisions to ask management to take5:51
  8. 8The habits that keep an AI register useful1:28
  1. Final quizOpens when every lesson is done.
  2. CertificateA dated record of completion, issued when you pass the quiz.