AI Governance for the Enterprise

Design, build, and run an AI governance system that actually holds up — in operation, in audit, and under scrutiny.

Who this is for

• Heads of compliance, risk, or AI governance
• Chief data / chief AI officers
• Governance consultants
• Senior internal auditors

What you will be able to do

• Design a governance framework proportionate to your organisation’s AI footprint
• Establish the right committees, roles, and escalation paths
• Build an AI inventory that supports risk, procurement, and regulatory reporting
• Design policy and standard architecture that scales
• Instrument governance so its effectiveness is measurable
• Report governance to boards and regulators credibly

Syllabus

Each module comprises a mix of structured reading, worked examples, and applied exercises. Every programme concludes with an integrated written assessment marked against the published rubric.

Module 1. The governance job to be done

What governance is for. The classic three lines. Why AI governance is genuinely different from IT governance.

Module 2. Frameworks landscape

ISO 42001, NIST AI RMF, EU AI Act, sector frameworks (SS1/23, MAS FEAT). How to choose and combine.

Module 3. Roles, committees, RACIs

Common architectures for AI governance committees. First-, second-, third-line responsibilities. Committee mandates.

Module 4. The AI inventory

What to record, at what granularity, and why. Discovery. Keeping it current.

Module 5. Policy architecture

The policy pyramid. What belongs at each level. Common patterns and anti-patterns.

Module 6. Lifecycle controls

Governance across ideation, development, procurement, deployment, monitoring, retirement.

Module 7. Measurement and reporting

What good governance metrics look like. Board-level and operational reporting.

Module 8. Making governance credible externally

Assurance approaches, third-party attestation, regulator engagement.

Assessment

Sample question

Your organisation has 40 AI systems in production spread across procurement, marketing, HR, and operations. The board wants “one page a month” on AI risk. What goes on the page?

Assessments are marked by a named human examiner against the four-dimension rubric: regulatory accuracy (30%), applied judgement (30%), artefact quality (25%), communication (15%). Pass at 60, distinction at 75.

Prerequisites

Working knowledge of enterprise risk management. EU AI Act Foundations is helpful but not required.

Certification

On successful completion (pass mark 60), you receive a SAAII Certified Practitioner (CP) — AI Governance for the Enterprise credential. The credential is CPD-accredited, verifiable at thesaaii.com/verify, and forms one component toward higher-tier credentials. See the certification ladder for how it stacks.

Cohort licensing available from £395/seat (10+). Public sector, education, and registered charity: 20% discount. Instalment plans available for programmes at £495 and above. See For organisations and the FAQ for detail.