This training teaches AI literacy and governance for managers, data protection and compliance officers and project leads who want to bring order to AI use in their company. You classify AI applications by risk, define roles and responsibilities and draft an approval process with documentation. The NIST AI Risk Management Framework and the EU AI Act serve as the frame. The training is not legal advice. For individual legal questions consult your legal department or an adviser.
What you’ll take away.
- Inventory AI applications in the company and classify them by risk
- Explain the risk tiers of the EU AI Act and what they mean for typical use cases
- Define roles, responsibilities and escalation paths for AI use
- Draft an approval process with review criteria, documentation and review intervals
- Outline an AI usage policy together with a training concept for employees
Your training in detail
- Who is it for?
- Managers, data protection, compliance and IT officers and project leads who steer AI use responsibly.
- Prerequisites
- Experience with business processes and basic knowledge of data protection. Technical AI knowledge is not required; first experience with AI tools helps.
- Format & planning
- Suggested format: 1 day (about 7 hours) live online, in-company or on site by arrangement. Scope depends on prior knowledge.
Agenda: from understanding to application
Our independently developed agenda proposal. Focus areas, lab environment and scope are agreed before booking.
Foundations: how AI systems work, typical failure modes such as hallucination and bias and what AI literacy means in a company.
Risk assessment using the NIST AI Risk Management Framework and its functions Govern, Map, Measure and Manage.
The EU AI Act (Regulation (EU) 2024/1689): risk tiers, duties for providers and deployers; the current status of deadlines is checked at course start.
Data protection and confidentiality: GDPR references, data processing agreements, input data, training use and supplier review.
Roles and processes: AI inventory, owners, approval of new applications, documentation and incident reporting.
Policy and enablement: structuring an AI usage policy, training records and review during ongoing operation.
Suggested exercise: List five AI use cases from your company in an inventory, classify them by risk and draft an approval sheet for the most critical one.
Exams, licences & credentials
No exam is tied to this course, and attending alone awards no certification. Anyone aiming for a management system under ISO/IEC 42001 needs separate consulting or certification. Costs are only included if confirmed in the offer.
Vendor references & review date
Sources checked on 2026-11-03. These sources describe the technology or external exam requirements. They do not imply a partnership with NextNowa.
Your learning content
These objectives describe the training topic. The specific syllabus, duration, dates, trainer and price are agreed before booking.
Frequently asked questions
Is the training legal advice on the EU AI Act?
No. It explains structure, risk tiers and typical duties clearly and shows how to translate them into processes. It gives no legally binding advice about your company. Because deadlines and interpretations can change, we check the current status at course start and recommend legal advice for individual questions.
Who should attend an AI governance training?
A mixed team from management, data protection, IT and a business department makes sense because AI use affects everyone. Individual officers can also attend. You do not need technical knowledge of models, but you do need a picture of where AI tools are already used in your company.
Do small companies need AI governance at all?
Small companies also use AI tools, often without clear rules. A lean policy, an inventory and a named contact person reduce risks for data protection and quality. Which legal duties apply to you depends on how AI is used. The training helps you keep the effort proportionate.
Does AI literacy & governance include a certificate?
No exam is tied to this course, and attending alone awards no certification. Anyone aiming for a management system under ISO/IEC 42001 needs separate consulting or certification. Costs are only included if confirmed in the offer.