A model that drifts, a chatbot that leaks customer data or a screening tool that quietly disadvantages women can become financial loss, regulatory action and lost trust long before anyone notices. Risk professionals are now expected to bring AI into the same disciplined process they apply to credit, operational and cyber exposure, yet most registers still treat it as a single line. Over ten days you learn to identify, analyse, evaluate and treat AI risk using ISO 31000, ISO/IEC 23894, the NIST AI RMF and the risk clauses of ISO/IEC 42001, and to map high-risk obligations under the EU AI Act.
The second week moves into quantification with Monte Carlo simulation and key risk indicators, adversarial threat modelling with MITRE ATLAS and the OWASP Top 10 for LLM Applications, third-party and model risk, incident playbooks and board reporting. It suits chief risk officers, enterprise and operational risk managers, model validators, compliance officers, internal auditors, security leads and data science managers in banking, insurance, telecoms, health and government. You leave able to run an AI risk assessment, write a Statement of Applicability and report residual risk with confidence. Classroom, online and in-house delivery all lead to a CPD-accredited certificate.
Most organisations already have a mature way of handling credit, operational and information security risk, but artificial intelligence does not fit neatly into those registers. Its failures are probabilistic, they can repeat across thousands of decisions before anyone notices, and they often fall on customers and citizens rather than on the balance sheet. Regulators, auditors and boards now expect AI risk to be identified, owned, treated and monitored with the same rigour as any other principal risk, and ISO/IEC 42001 requires a documented AI risk assessment and risk treatment process from any organisation seeking certification.
The Risk Management for AI Governance, Responsible AI & ISO 42001 Training Course applies the full risk management cycle to AI systems. Week one establishes the frameworks and the process: an AI risk taxonomy, the relationship between ISO 31000, ISO/IEC 23894 and the NIST AI RMF, risk criteria and appetite, identification and analysis techniques adapted from IEC 31010, and treatment through Annex A controls recorded in a Statement of Applicability. Week two goes further, into quantifying exposure and stress testing models, adversarial and generative AI threats, supplier and model risk, monitoring, incident handling and reporting to the board, closing with an integrated project.
Teaching is workshop-based. Participants work through risk files for a digital lender, a hospital triage tool, a public benefits system and a customer-service chatbot, using spreadsheet models and templates they can take straight back to their own risk function.
On completing the programme, participants will be able to:
Each participant goes home with a working AI risk toolkit, including:
Every session applies a risk technique to a live example rather than describing it in the abstract. The approach combines:
Day 1: AI Through a Risk Lens
Day 2: Frameworks and Standards for AI Risk
Day 3: Context, Criteria and Risk Appetite
Day 4: Identifying and Analysing AI Risk
Day 5: Treating Risk and the Statement of Applicability
Day 6: Quantifying Exposure and Stress Testing Models
Day 7: Adversarial, Security and Generative AI Risk
Day 8: Third-Party and Model Risk
Day 9: Monitoring, Incidents and Risk Reporting
Day 10: Integrated AI Risk Project
The course suits professionals who own, assess or challenge risk in organisations that build or buy AI, such as:
A CPD-accredited Certificate of Completion issued by Vision Reach Global Consultancy is awarded to participants who attend all ten days and complete the risk labs and the integrated project.
It records the course title, dates and delivery format. It is a training certificate rather than ISO/IEC 42001 auditor or implementer certification, and the register and appetite statement you build can support your CPD records.
Upcoming cohorts
CPD-Accredited
Official invoice & confirmation letter provided
Team discount for 3+ seats
Need help with this booking?
Our training team can help with group pricing, invoicing, or picking the right schedule.
Everything you need to know about this course before you register.
By the end of the Risk Management for AI Governance, Responsible AI & ISO 42001 programme, you'll be able to classify ai risks by source, lifecycle stage and affected party using a structured taxonomy, compare iso 31000, iso/iec 23894, the nist ai rmf and the risk clauses of iso/iec 42001 and map them to one another, define risk criteria, appetite and tolerance statements suited to ai systems and the harms they can cause, and apply fmea, bow-tie and scenario techniques to identify and analyse risks in machine learning pipelines. The full breakdown of topics is covered session by session in the Course Outline tab above.
The course suits professionals who own, assess or challenge risk in organisations that build or buy AI, such as: Chief risk officers and heads of enterprise risk management, Operational, technology and model risk managers, Model validation and quantitative risk analysts in banks and insurers, Compliance officers and data protection officers, Internal auditors responsible for technology and AI assurance, Chief information security officers and security architects, Data science and machine learning team leads, Risk and ICT officers in government agencies, regulators and development organisations, and Consultants advising clients on ISO/IEC 42001 implementation.
Risk Management for AI Governance, Responsible AI & ISO 42001 Training Course typically runs as 10 Days. It's available as in-person classroom, live virtual, and in-house corporate training — every course can also be delivered on-site for your team on dates that suit you.
Risk Management for AI Governance, Responsible AI & ISO 42001 Training Course is scheduled in-classroom in Nairobi, Kenya, Mombasa, Kenya, Naivasha, Kenya, and Kisumu, Kenya, and 14 other locations, plus a live interactive virtual classroom you can join from anywhere. Check the schedule panel above for exact upcoming dates and fees in each location.
The next live virtual cohort of Risk Management for AI Governance, Responsible AI & ISO 42001 starts October 19, 2026, with new classroom cohorts also running on a rolling basis. Pick a date and location in the schedule panel above, then click "Register for the Course" — it takes a few minutes and your seat is confirmed once payment or a signed purchase order is received.
Yes — delegates who meet the attendance requirement receive a Certificate of Completion for Risk Management for AI Governance, Responsible AI & ISO 42001 Training Course from Vision Reach Global Consultancy, issued in the name you register with, so double-check the spelling at checkout.
Risk Management for AI Governance, Responsible AI & ISO 42001 Training Course is pitched at intermediate professionals. If you're unsure whether it's the right fit for your current role or background, message our training advisors before you register and they'll help you confirm.
Fees for Risk Management for AI Governance, Responsible AI & ISO 42001 Training Course vary by delivery location and format and are shown in real time in the schedule panel above once you pick a date. Register 3 or more delegates on the same course together and a 5% team discount is applied automatically — larger cohorts can request a custom corporate quote.
Yes — Risk Management for AI Governance, Responsible AI & ISO 42001 Training Course can be delivered on-site at your offices (or virtually for distributed teams), with case studies and examples tailored to your industry and the specific challenges your team is working through. Switch to the "In-House" tab in the schedule panel above to request a proposal.
Related Training
Key Skills You'll Learn
Vision Reach Global
From $3,000 · KSh 230,000
Key Skills You'll Learn
Vision Reach Global
From $3,000 · KSh 230,000
Key Skills You'll Learn
Vision Reach Global
From $3,000 · KSh 230,000
Swipe to see more courses →
VRG brings strategic discipline to complex organizational challenges. Their approach is structured, data-driven, and outcome-focused.
Levis Wabwire
Managing Director
They facilitated our strategy review, we improved departmental KPI alignment by 35% and reduced operational bottlenecks significantly.
David Oketch
Strategy Lead
Employee engagement scores increased following the leadership training program. The difference in accountability culture is evident.
Wendy Albright
Program Manager