Courses / On-demand courses
AI Governance and Risk
Write the AI policy, risk register and controls your organisation needs under the EU AI Act, ISO 42001 and NIST AI RMF.
AI Governance and Risk is a self-paced online course: 9.5 hours of recorded sessions across 7 modules, with 6 graded by Nova, Square 1's AI tutor. The founding price is A$29, down from A$59. Start any time and keep your own pace.
Price: A$29A$59
Founding price, one payment. Founding students keep their founding price on any second programme.
25 spots open now
0 held · 25 open
Founding intake. Spot holders hear the start date first.
Module by module
Module 1 · 60 min
Why AI governance, and who owns it
Module 2 · 90 min · graded
The EU AI Act: risk tiers and obligations
Module 3 · 90 min · graded
NIST AI RMF and ISO/IEC 42001
Module 4 · 75 min · graded
An AI inventory and risk register
Module 5 · 90 min · graded
Policies, controls and vendor due diligence
Module 6 · 75 min · graded
Testing, monitoring and incidents
Module 7 · 90 min · graded
Project: the governance pack
- recorded hours
- 9.5
- modules, in order
- 7
- deployed projects
- 3
- graded checkpoints
- 6
Who it is for, and what you receive.
People in risk, compliance, legal, security, IT or management who have been asked to make their organisation's AI use safe and compliant.
Before you start
You work in risk, compliance, legal, security, IT or management. No code.
Skills
- AI governance
- EU AI Act
- ISO 42001
- NIST AI RMF
- risk management
- AI policy
- 1
The recorded sessions
Taught by an instructor, taken in order at your own pace, yours for twelve months.
- 2
Graded work after every module
Exercises and projects marked by Nova against a rubric you can read, with what you did well and what to fix.
- 3
The projects
Deployed and graded, each one on your record with its repository.
- 4
Your hiring plan
The same six-part plan the bootcamps use, run with the career agent.
- 5
The record and the certificate
Every grade at square1ai.com/u/{handle}; a credential ID that resolves at square1ai.com/verify.
- 6
Nova as your tutor
Help that is about your actual work, because it has read all of it.
The content plan, module by module.
9.5 recorded hours from an instructor, taken in order at your own pace. Nova grades the work at the end of each module.
Why AI governance, and who owns it
Module 1 · 60 min
Watch and take notes; nothing to submit in this module.
- Claude
- ChatGPT
- Microsoft Copilot
What goes wrong
Roles and accountability
Where governance sits
The EU AI Act: risk tiers and obligations
Module 2 · 90 min
Graded at the end: Classify ten AI systems by risk tier.
- Claude
- ChatGPT
- Microsoft Copilot
Prohibited, high, limited and minimal risk
Provider and deployer duties
Timelines and penalties
NIST AI RMF and ISO/IEC 42001
Module 3 · 90 min
Graded at the end: A gap assessment against ISO 42001.
- Claude
- ChatGPT
- Microsoft Copilot
Govern, map, measure, manage
The 42001 management system
Mapping one to the other
An AI inventory and risk register
Module 4 · 75 min
Graded at the end: An AI inventory and risk register for a case company.
- Claude
- ChatGPT
- Microsoft Copilot
Finding shadow AI
Rating AI risks
Owners and treatments
Policies, controls and vendor due diligence
Module 5 · 90 min
Graded at the end: An AI use policy and a vendor questionnaire.
- Claude
- ChatGPT
- Microsoft Copilot
An AI use policy
Technical and process controls
Vendor questionnaires
Testing, monitoring and incidents
Module 6 · 75 min
Graded at the end: A monitoring and incident plan for one AI system.
- Claude
- ChatGPT
- Microsoft Copilot
Pre-deployment testing
Monitoring in production
AI incident response
Project: the governance pack
Module 7 · 90 min
Graded at the end: The full governance pack, graded.
- Claude
- ChatGPT
- Microsoft Copilot
Inventory
Policy and controls
Board summary
The projects.
Each is deployed and graded by Nova against a rubric you can read before you start.
- 1
An AI inventory and risk register
A fictional 300-person insurer uses AI in claims triage, marketing copy, a customer chatbot and staff tools nobody approved. Build its AI inventory, classify each system under the EU AI Act and rate its risks.
You hand in
- AI inventory
- EU AI Act classification
- Risk register with owners
The rubric requires
Every system is classified with a reason and every high risk has an owner and a treatment.
- 2
An AI use policy with controls
Write the insurer's AI use policy and the controls that make it real: approved tools, data rules, human review, and a questionnaire for any new AI vendor.
You hand in
- AI use policy
- Controls mapped to risks
- Vendor questionnaire
The rubric requires
Each control maps to a risk in the register and to an ISO 42001 or NIST AI RMF reference.
- 3
The governance pack
Assemble the full pack the insurer's board and auditor will ask for: inventory, register, policy, monitoring and incident plan, and a two-page board summary of where the company stands.
You hand in
- Complete governance pack
- Monitoring and incident plan
- Two-page board summary
The rubric requires
The pack would answer an auditor's first ten questions, checked against the rubric.
What you can do at the end.
A complete AI governance pack built to the EU AI Act, ISO 42001 and NIST AI RMF, with three graded projects on your record.
- 1
Classify AI systems under the EU AI Act and name each one's obligations.
- 2
Assess an organisation against ISO/IEC 42001 and the NIST AI RMF.
- 3
Build an AI inventory and risk register.
- 4
Write an AI use policy, controls and a vendor questionnaire.
- 5
Plan testing, monitoring and incident response for an AI system.
Roles this prepares you for
- AI governance lead
- Risk and compliance manager
- Privacy or security officer
- IT manager
No placement rate is shown, because there are no graduates to count yet. The roles above are what the projects are built for.
Your record at the end.
Every exercise and project is graded by Nova against a rubric you can read, and every grade is kept on one page an employer can open and run. This is what the programme writes to it.
- Graded, line by line
- Nova reads every submission against the brief and the rubric and returns a score, what you did well and what to fix.
- Module by module
- Each module ends in graded work; the next opens when you are ready, on your own schedule.
- Nova remembers
- Help is about your actual work, because the tutor has every submission and every failed exercise of yours.
- One page an employer can run
- Every grade and project at /verify. An employer opens it and runs the code.
Record, AI Governance and Risk
Example
- ProjectGraded
An AI inventory and risk register
Every system is classified with a reason and every high risk has an owner and a treatment.
- ProjectGraded
An AI use policy with controls
Each control maps to a risk in the register and to an ISO 42001 or NIST AI RMF reference.
- ProjectGraded
The governance pack
The pack would answer an auditor's first ten questions, checked against the rubric.
- Every moduleGraded
6 graded checkpoints
Each module ends in work Nova grades line by line against a rubric you can read.
- AfterKept
Your hiring plan
Target roles, the gap map, the proof to send, weekly actions and an interview log.
The entries, not the grades: those are yours to earn. The page lives at /verify and an employer needs no account to open it.
5 entries, at your own pace. 25 spots are open.
Reserve my spotHow we help you find a job.
Proof, not a certificate: the projects you deployed are the thing you show, and the tools below are yours to use.
- 1
Your hiring plan
The same six-part plan the bootcamps use: target roles, the gap map, the proof to send, weekly actions, an interview log, the outcome. You run it with the career agent.
- 2
A record an employer can run
Your graded projects on /verify. An employer opens it and runs the code.
- 3
The career agent
Paste a real job posting at /career and it maps the role to your graded work and what to do next.
- 4
The roles directory
Every role we prepare people for, what it pays and what it asks, at /roles.
- 5
A path to the live cohort
If you want the instructor, the gates and the hiring sprint, the bootcamp on the same subject is one waitlist away.
Questions people ask.
About AI Governance and Risk, answered from the plan on this page.
Related programmes
- Agents with n8n and Make · 7 h on demand
- AI for Marketers · 7 h on demand
- AI for Sales · 6.5 h on demand
How long is AI Governance and Risk?
9.5 hours of recorded sessions across 7 modules, taken at your own pace. 6 of the modules end in work Nova grades.
Is AI Governance and Risk live or self-paced?
Self-paced. The sessions are recorded by an instructor who does this work, and Nova, Square 1's AI tutor, grades every checkpoint and project against a rubric you can read.
How much does AI Governance and Risk cost?
A$29 for the founding intake, paid once; the standard price is A$59. It is the same price in every country. Founding students keep their founding price on any second programme.
Who is AI Governance and Risk for?
People in risk, compliance, legal, security, IT or management who have been asked to make their organisation's AI use safe and compliant. Before you start: You work in risk, compliance, legal, security, IT or management. No code.
What will I build in AI Governance and Risk?
3 deployed projects: An AI inventory and risk register, An AI use policy with controls and The governance pack. Each is graded against a published rubric and kept on a record an employer can open at /verify.
What skills does AI Governance and Risk teach?
AI governance, EU AI Act, ISO 42001, NIST AI RMF, risk management and AI policy. It prepares you for roles such as AI governance lead, Risk and compliance manager, Privacy or security officer and IT manager.
Does AI Governance and Risk guarantee a job?
No. No placement rate is published because there are no graduates to count yet. What you leave with is graded, deployed work on one record an employer can open and run, and a hiring plan you keep with the career agent.
How do I join AI Governance and Risk?
Reserve one of the twenty-five founding spots on this page with your email. Spot holders hear the opening date first, and nothing is charged before you confirm. The price on this page is in Australian dollars and is the same in every country.
25 spots. Hold one of them.
25 founding spots. Recorded by an instructor who does this work, graded by Nova. Spot holders hear the opening date first, and nothing is charged before you confirm.
- Map an organisation's AI use to the EU AI Act, ISO 42001 and NIST AI RMF
- Write the policy, register and controls an auditor asks for
- Three graded projects on your record
About a minute. No account, no card, and nothing is charged until you confirm.