Artificial intelligence now influences credit decisions, hiring, health triage, fraud detection, public services and customer interaction. With that reach comes accountability. Regulators across several regions are drafting or enforcing rules on automated decision making, and customers and investors expect organisations to show who owns each AI system, what data it uses, how it has been tested and what happens when it fails. ISO/IEC 42001 provides a certifiable management system framework for exactly this purpose.

This ten-day programme takes participants from governance principles to a working, auditable AI management system. The opening days establish context: AI concepts for non-engineers, the risk landscape, responsible AI principles and the structure of the standard. Subsequent sessions build the system component by component, including policy, scope, roles, objectives, impact assessments, data and model lifecycle controls, supplier management, documentation and awareness. The second week concentrates on assurance: monitoring and metrics, incident response, generative AI specific controls, internal audit, management review, corrective action and certification readiness.

Participants work throughout on a case organisation, producing artefacts such as a gap analysis, risk register, statement of applicability and audit plan. The final days integrate everything in a project presented to the group for challenge and feedback.

By the end of the programme, participants will be able to:

• Explain the principles of responsible AI and the governance models used to apply them.
• Interpret the clauses and Annex controls of ISO/IEC 42001 and plan their implementation.
• Define the scope, policy, roles and objectives of an AI management system.
• Conduct AI risk and impact assessments covering fairness, safety, privacy and security.
• Establish data governance and model lifecycle controls from design to retirement.
• Assess third-party and generative AI providers, and design monitoring and incident response for AI systems.
• Plan internal audits and management reviews against the standard and prepare the organisation for external certification.
• Map the management system to applicable laws and sector expectations.

The programme serves professionals who oversee, build, buy or assure AI, including:

• Compliance, risk and governance officers
• Chief data officers and heads of analytics or AI
• Information security and privacy managers
• Internal and external auditors
• Legal counsel and ethics committee members
• Product owners and digital transformation leaders
• Procurement officers buying AI-enabled systems
• Public sector ICT and policy officers
• Management system and quality managers adding AI to existing ISO systems

Participants leave with:

• A gap analysis against ISO/IEC 42001 for a chosen organisation.
• A draft AI policy set and governance charter.
• An AI risk register and impact assessment template.
• A statement of applicability with justified control selection.
• A supplier and generative AI due diligence checklist.
• An internal audit programme and sample audit report.
• A certification readiness roadmap with owners and dates.

The programme is cumulative, with each day adding a component to a case-based management system. Delivery includes:

• Expert-led explanation of standard requirements in practical terms
• Daily labs producing governance artefacts and registers
• Review of anonymised AI failures and near misses
• Mock audits and incident simulations
• A final project defended before the group

Participants who attend the ten days and complete the labs and final project receive a CPD-accredited Certificate of Completion from Vision Reach Global Consultancy. It confirms training in AI governance practice; it is not an ISO auditor qualification.