Course description

This course provides in-depth guidance on implementing ISO/IEC 42001:2023, the first international management system standard for Artificial Intelligence (AI). Designed for organizations that develop, deploy, or use AI systems, ISO 42001 sets out a framework for responsible AI governance, risk management, transparency, and continuous improvement. Participants will learn how to operationalize AI ethics, manage lifecycle risks, and align with evolving regulatory expectations.

What You’ll Learn

By the end of the course, you will be able to:

• Understand the scope, terminology, and structure of ISO/IEC 42001:2023.

• Establish and maintain an AI Management System (AIMS) aligned with organizational strategy.

• Apply principles of trustworthy and responsible AI across the lifecycle.

• Conduct AI-specific risk assessments, impact assessments, and conformity evaluations.

• Define accountability, roles, and oversight structures for AI governance.

• Implement controls for data quality, bias mitigation, explainability, and traceability.

• Align AIMS with legal, regulatory, and ethical frameworks (e.g., EU AI Act, OECD AI Principles).

• Monitor AI system performance, incidents, and continual improvement mechanisms.

• Integrate AI governance into existing management systems (e.g., ISO 27001, ISO 9001).

• Prepare for internal audits or third-party certification of AI governance systems.

Who Should Attend

• AI Project Leaders and Data Scientists

• Chief AI Officers and Tech Governance Teams

• Compliance, Risk, and Ethics Officers

• CTOs, CIOs, and Digital Transformation Leaders

• AI Solution Developers and Product Managers

• Legal, Regulatory, and Quality Professionals in AI fields

• Consultants in AI governance, trust, and auditing

Recommendations

• Familiarity with AI system development, ML models, or data governance is helpful

• No prior ISO 42001 experience is required

• Strong fit for organizations building or deploying high-impact AI application

Course description

This course provides comprehensive guidance on implementing ISO 30201:2019, the international standard that outlines the core principles and framework for a Records Management System (RMS). ISO 30201 is part of the ISO 30300 family and supports organizations in ensuring the integrity, reliability, usability, and preservation of records over time. This training equips professionals with the tools to establish a records management framework aligned with organizational objectives, regulatory requirements, and digital transformation initiatives.

What You’ll Learn

By the end of the course, you will be able to:

• Understand the purpose, scope, and terminology of ISO 30201:2019.

• Identify the structure and components of a records management system (RMS).

• Align RMS policies and procedures with ISO 30301 and ISO 15489 standards.

• Define roles and responsibilities for records governance and lifecycle management.

• Establish processes for creating, capturing, classifying, and securing records.

• Apply risk-based approaches to retention, access, and disposal of records.

• Manage digital records, metadata, and system interoperability.

• Ensure compliance with legal, regulatory, and ethical obligations.

• Support audits, investigations, and business continuity through reliable records.

• Monitor and improve the RMS based on performance indicators and feedback.

Who Should Attend

• Records and Information Managers

• Document Controllers and Archivists

• Compliance and Governance Officers

• Risk and Legal Affairs Professionals

• IT Professionals managing document systems

• Consultants implementing RMS or ISO 30301 systems

Recommendations

• Prior experience with document control or compliance is helpful

• No prior ISO 30201 experience required

• Suitable for public, private, and nonprofit sectors managing sensitive or critical records

Skills

• ISO 30201 clause interpretation

• Records lifecycle governance

• Risk-based records retention planning

• Digital records and metadata management

• Records access, privacy, and security controls

• Compliance with ISO 30301, ISO 15489, and local laws

• RMS audit readiness and documentation

• Integration with quality or information management systems

• Continuous improvement of records processes

Course description

This course provides detailed guidance on implementing ISO/IEC 27017:2015, the international standard for information security controls in cloud computing environments. As a security extension to ISO/IEC 27001 and ISO/IEC 27002, this standard offers additional controls and implementation advice specifically for cloud service providers (CSPs) and cloud service customers (CSCs). Participants will learn how to identify cloud-specific risks, implement appropriate controls, and manage shared responsibilities effectively in a cloud environment.

What You’ll Learn

By the end of the course, you will be able to:

• Understand the purpose, structure, and scope of ISO/IEC 27017:2015.

• Identify the differences and alignment with ISO/IEC 27001 and 27002.

• Recognize the shared responsibility model in cloud computing.

• Implement the 7 additional controls and 37 enhanced guidelines specific to cloud services.

• Address cloud-specific risks including multi-tenancy, virtualization, and legal jurisdiction.

• Develop clear roles and responsibilities between CSPs and CSCs.

• Manage cloud service agreements, SLAs, and third-party assurance requirements.

• Ensure compliance with data privacy, availability, and integrity expectations in the cloud.

• Strengthen incident response, backup, and business continuity in cloud-based environments.

• Prepare for audits or certifications that require cloud security assurances.

Who Should Attend

• Information Security Managers and CISOs

• Cloud Service Providers (IaaS, PaaS, SaaS)

• IT Risk and Compliance Officers

• Data Privacy and Governance Professionals

• Cloud Architects and DevSecOps Teams

• Consultants implementing ISO 27001 in cloud environments

Recommendations

• Familiarity with cloud computing models and ISO/IEC 27001 is helpful

• No prior experience with ISO 27017 is required

• Ideal for organizations migrating to or managing cloud-based infrastructure

Skills

• ISO/IEC 27017 clause interpretation and implementation

• Cloud-specific risk identification and control design

• CSP/CSC role delineation

• Security in virtualization and multitenant environments

• Data lifecycle protection in cloud services

• Secure configuration and administrative operations

• SLA and contractual security alignment

• Incident management in cloud infrastructure

• Integration with ISO/IEC 27001 and 27002