Instructor-led programmes that turn frameworks into working practice — each delivers hands-on participant outputs your team can use straight away. Need a tailored or in-house cohort? Tell us your goals and we'll scope it.
Establishing an AI management system; governance roles and accountability; AI policies and objectives; AI system inventory; risk and impact assessments; lifecycle controls; third-party oversight; documentation, internal audit and continual improvement.
Understanding the regulatory framework; identifying organisational roles and applicable obligations; assessing AI use cases; prohibited practices and risk categories; AI literacy; human oversight; transparency; documentation and evidence; supplier responsibilities and readiness planning.
Establishing an information security management system; scope and organisational context; information asset management; risk assessment and treatment; control selection; Statement of Applicability; policies; incident management; supplier security; internal audit and management review.
Establishing a business continuity management system; business impact analysis; disruption risks; continuity strategies; recovery priorities; business continuity plans; crisis communication; exercising, evaluation and improvement. Includes the relationship between business continuity and IT disaster recovery.
Industrial control environments; OT asset identification; responsibilities across asset owners, service providers and suppliers; risk assessment; zones and conduits; security levels; access control; secure remote access; segmentation; maintenance and incident response.
Applying the Prepare, Categorize, Select, Implement, Assess, Authorize and Monitor steps; defining system boundaries; selecting and tailoring controls; documenting implementation; assessing evidence; managing remediation and continuous monitoring.
We deliver these programmes privately for your team — adapted to your sector, systems and maturity. Tell us your objectives and group size.
Add standards-based AI governance, cybersecurity, cloud, resilience, OT security and compliance capabilities without building every competency internally.
