Description
A course to show which AI the company uses and how it controls it, with evidence taken from your own systems rather than policies on paper alone. It works with the EU AI Act as it stands after the 2026 amendment and with ISO/IEC 42001, the AI management system standard, applied to a concrete case: an assistant running on the company’s own servers.
Course details
| SIXE code: SXIA10 | Category: Artificial Intelligence / AI governance |
| Delivery: Online and on-site | Duration: 2 days |
Who it is for
Compliance, security and IT managers, data protection officers and technical teams who have to prepare the documentation and evidence for the company’s AI systems.
Prerequisites
No programming needed. It helps to know how an assistant or an agent is used in the company and to have worked with a management standard such as ISO 27001.
What you will learn
- Taking inventory: which AI systems the company has, who uses them and what for, including the ones nobody has declared.
- Classifying under the AI Act: prohibited practices, high risk, transparency obligations and minimal risk, and whether the company acts as provider or as deployer.
- The dates that apply: what is already binding (prohibitions, AI literacy and general-purpose models), what Article 50 asks on transparency and why high risk has moved to December 2027 and August 2028.
- Getting evidence out of the system: usage logs, request traces, model cards and human oversight, built from what vLLM, Langfuse or your SIEM already produce.
- Building the management system: how ISO 42001 fits with all of the above, which controls it requires and what it does not give you: certification does not amount to AI Act compliance.
You work on a sample case, an internal assistant that answers HR questions, and finish with its inventory entry, a reasoned classification and the evidence file.
What you take away
- An inventory and classification template for AI systems.
- The evidence file for the case study, ready to adapt.
- A gap analysis against ISO 42001.
If you need help applying it in your company, see our AI Act compliance service. For the technical security of assistants there is the AI security course with OWASP.
Frequently asked questions
How long is the course?
2 days.
Is it online or on-site?
Both: at your offices or remotely, with a live instructor.
What do I need to know beforehand?
No programming needed. It helps to know how an assistant or an agent is used in the company and to have worked with a management standard such as ISO 27001.
Does it cover AI literacy under Article 4?
It helps, but Article 4 does not require a course or a specific level: it asks for measures so staff understand the AI they use. This course is for the people who have to organise those measures and document them.
Does it include ISO 42001 certification?
No. The course prepares the management system and the evidence; certification is issued by an accredited body.
Can it be tailored to my team?
Yes. We adapt the examples and labs to your team’s tools and processes, and it can be combined with other AI courses.
