Data Governance, Security & Responsible AI

COURSE DESCRIPTION

Staff across most organisations are already using public AI tools, usually without guidance on what may be shared. For organisations holding sensitive infrastructure, commercial or personal data, that is a live exposure. This program covers data classification, the real differences between public, private and on-premise deployment, writing an acceptable use policy that people actually follow, vendor due diligence, and incident response.

WHO SHOULD ATTEND

• Senior management with data and IT accountability
• IT and information security leadership
• Legal, compliance and audit heads
• Any officer sponsoring an AI initiative

DURATION AND FORMAT

1 day (7 contact hours)

PREREQUISITE

None

COURSE OUTLINE

1. Data classification — what is genuinely sensitive in your organisation
2. Public, private and on-premise AI: the differences that actually matter
3. Writing an acceptable use policy that staff will follow rather than circumvent
4. Vendor due diligence — the questions to ask before procurement
5. Bias, error, hallucination and where accountability sits
6. Incident response when data goes somewhere it should not have

WHAT YOU WILL BE ABLE TO DO

• Classify your organisation’s data by AI exposure risk
• Choose an appropriate deployment model for each data class
• Issue an acceptable use policy with clear, enforceable rules
• Evaluate an AI vendor’s security posture before committing

YOU LEAVE WITH

A draft data classification table and acceptable use policy outline for the participant’s organisation.