# The Security and AI Institute

> Professional education in AI governance, EU AI Act compliance, risk, and assurance


## Pages

- [About](https://thesaaii.com/about/): The Security and AI Institute is a UK-based professional education body for the compliance, legal, risk, and audit professionals whose job it is to make AI compliant in practice.
- [Enrol](https://thesaaii.com/enrol/): Choose your programme to begin. Each course page provides its syllabus, price and available enrolment options.
- [Our Leadership](https://thesaaii.com/our-leadership/): SAAII is UK-headquartered, with a global reach and leadership around the world.
- [Enterprise AI Architect Fellow: Fellow Assessment](https://thesaaii.com/programmes/enterprise-ai-architect-fellow-fellow-assessment/): The assessment course for SAAII Fellow standing on the Enterprise AI Architect track (post-nominal FSAII).
- [AI Ethics and Responsible Innovation Fellow: Fellow Assessment](https://thesaaii.com/programmes/ai-ethics-and-responsible-innovation-fellow-fellow-assessment/): The assessment course for SAAII Fellow standing on the AI Ethics and Responsible Innovation track (post-nominal FSAII).
- [AI in Insurance](https://thesaaii.com/programmes/ai-in-insurance/): A Specialist course for people who apply AI governance inside insurers, MGAs, brokers, Lloyd's managing agents and reinsurers.
- [Synthetic Data and Privacy-Enhancing Technologies](https://thesaaii.com/programmes/synthetic-data-and-privacy-enhancing-technologies/): A Specialist course for people who must sign, defend or refuse a decision to use a privacy-enhancing technology.
- [Human Oversight and Meaningful Human Control](https://thesaaii.com/programmes/human-oversight-and-meaningful-human-control/): A Practitioner course for the people who design, staff, run and evidence human oversight of AI.
- [AI Literacy for the Workforce](https://thesaaii.com/programmes/ai-literacy-for-the-workforce/): A Foundation course built for whole workforces: staff, contractors and others who use or operate AI on an organisation's behalf.
- [Governing Generative AI and Foundation Models](https://thesaaii.com/programmes/governing-generative-ai-and-foundation-models/): A Practitioner course for the people who set the rules for generative AI inside an organisation that buys or builds on foundation models.
- [Generative AI for Organisations](https://thesaaii.com/programmes/generative-ai-for-organisations/): A Foundation course for people who use generative AI tools at work, or are about to, and for the managers who sign off their work.
- [AI Adoption, Culture and Workforce Change](https://thesaaii.com/programmes/ai-adoption-culture-and-workforce-change/): A Practitioner course on the people side of AI: planning and leading the change, building skills at scale, earning trust, involving workers and their representatives, turning shadow AI into safe use, and measuring whether adoption is real.
- [AI Procurement and Vendor Evaluation](https://thesaaii.com/programmes/ai-procurement-and-vendor-evaluation/): A Practitioner course on the AI buying process, from an agreed requirement to a signed contract handed to the people who will manage the vendor.
- [AI Use-Case Discovery and Prioritisation](https://thesaaii.com/programmes/ai-use-case-discovery-and-prioritisation/): A Practitioner course on the operational work between an AI strategy and a delivery team: turning a queue of AI ideas into a small number of funded projects, and stopping the ones that fail.
- [AI in Healthcare and Life Sciences](https://thesaaii.com/programmes/ai-in-healthcare-and-life-sciences/): A Specialist course for the people who bring AI medical devices and AI-enabled medicines processes to market and keep them safe once there.
- [Governing AI in Defence and National Security](https://thesaaii.com/programmes/governing-ai-in-defence-and-national-security/): A Specialist course on governing AI where the main civil rulebooks stop.
- [AI in Government and the Public Sector](https://thesaaii.com/programmes/ai-in-government-and-the-public-sector/): A Specialist course for people who must decide whether a public body may lawfully use an AI tool, how that use must be governed and recorded, and how the tool should be bought.
- [AI in Manufacturing and Industrial Products](https://thesaaii.com/programmes/ai-in-manufacturing-and-industrial-products/): A Specialist course for the people who sign, review or defend a declaration of conformity for an AI-enabled machine or connected product.
- [AI in Banking and Credit](https://thesaaii.com/programmes/ai-in-banking-and-credit/): A Specialist course for people who govern AI inside banks, building societies, payments firms and consumer credit businesses.
- [AI Security Testing and Assurance](https://thesaaii.com/programmes/ai-security-testing-and-assurance/): Turning one-off findings into ongoing assurance: security testing methods for models, pipelines and AI-enabled applications.
- [AI for Cyber Threat Intelligence, Intelligence and OSINT](https://thesaaii.com/programmes/ai-for-cyber-threat-intelligence-intelligence-and-osint/): Using AI responsibly in cyber threat intelligence and OSINT, and understanding how adversaries use it against you.
- [AI in Social Care and Human Services](https://thesaaii.com/programmes/ai-in-social-care-and-human-services/): A globally applicable course on AI in social care and human services, covering risk-scoring and case management, safeguarding and monitoring technology, consent and capacity, bias and equity, and accountability for AI-assisted decisions affecting vulnerable people.
- [AI Evaluation, Testing and Model Assurance](https://thesaaii.com/programmes/ai-evaluation-testing-and-model-assurance/): A technical evaluation course covering model and system evaluation, accuracy, robustness, and reliability testing, hallucination and groundedness, bias and fairness testing, human oversight effectiveness, agentic system evaluation, and monitoring and post-deployment assurance.
- [Enterprise AI Strategy and Operating Models](https://thesaaii.com/programmes/enterprise-ai-strategy-and-operating-models/): Designing the AI operating model, realising value at scale and leading the organisational change that enterprise AI demands.
- [Privacy, Data Protection and AI](https://thesaaii.com/programmes/privacy-data-protection-and-ai/): Applying UK and EU GDPR to AI: lawful basis, DPIAs, automated decision-making, data subject rights and international transfers.
- [AI Data Governance and Quality](https://thesaaii.com/programmes/ai-data-governance-and-quality/): Data governance for AI in practice: lineage, quality, provenance, consent and the data duties that sit behind the EU AI Act and UK GDPR.
- [AI Supply Chain and Model Risk](https://thesaaii.com/programmes/ai-supply-chain-and-model-risk/): Almost no organisation builds an AI system entirely from its own components.
- [AI Threat Modelling and Red Teaming](https://thesaaii.com/programmes/ai-threat-modelling-and-red-teaming/): Structured threat modelling for AI systems and how to plan, run and report an AI red-team exercise.
- [Post-Quantum Cryptography Migration Practitioner](https://thesaaii.com/programmes/post-quantum-cryptography-migration-practitioner/): Someone has to actually run the post-quantum cryptography migration.
- [Quantum Computing for Government and Critical Infrastructure](https://thesaaii.com/programmes/quantum-computing-for-government-and-critical-infrastructure/): Governments are acting on quantum risk before a cryptographically relevant quantum computer exists, under a 'harvest now, decrypt later' threat model.
- [Quantum and AI Convergence](https://thesaaii.com/programmes/quantum-and-ai-convergence/): Quantum computing and AI are increasingly discussed together, but the genuine mathematical basis for convergence is narrower than the marketing suggests.
- [Quantum Ethics and Governance](https://thesaaii.com/programmes/quantum-ethics-and-governance/): Quantum computing raises governance questions now, well before any confirmed cryptographically relevant threat exists.
- [Quantum Risk for Boards and Executives](https://thesaaii.com/programmes/quantum-risk-for-boards-and-executives/): Quantum computing has reached the board agenda, and separating credible expert consensus from hype is now an executive responsibility.
- [Quantum Computing Fundamentals for Non-Physicists](https://thesaaii.com/programmes/quantum-computing-fundamentals-for-non-physicists/): You do not need a physics degree to understand what quantum computing is, why it matters for security, and where the genuine capability ends and the hype begins.
- [Securing AI Systems and the AI Lifecycle](https://thesaaii.com/programmes/securing-ai-systems-and-the-ai-lifecycle/): Securing 'the model' was never the whole job.
- [AI in Healthcare: Foundations for Pharmacists](https://thesaaii.com/programmes/ai-in-healthcare-foundations-for-pharmacists/): AI-assisted prescribing checks and dispensing support tools are increasingly part of pharmacy practice.
- [AI in Healthcare: Foundations for Surgeons](https://thesaaii.com/programmes/ai-in-healthcare-foundations-for-surgeons/): AI-assisted surgical planning and intraoperative support tools are increasingly part of surgical practice.
- [AI in Healthcare: Foundations for Dentists](https://thesaaii.com/programmes/ai-in-healthcare-foundations-for-dentists/): AI-assisted diagnostic imaging and treatment-planning tools are increasingly part of dental practice.
- [AI in Healthcare: Foundations for Doctors](https://thesaaii.com/programmes/ai-in-healthcare-foundations-for-doctors/): Clinical decision support, diagnostic AI, and AI-assisted triage are increasingly part of everyday medical practice.
- [AI Governance Fundamentals for Students](https://thesaaii.com/programmes/ai-governance-fundamentals-for-students/): The low-cost, entry-level on-ramp into AI governance for university and college students.
- [AI Enterprise Architect](https://thesaaii.com/programmes/ai-enterprise-architect/): A senior, architect-level programme for the people who make the structural decisions that determine whether an AI system can be governed, audited, and trusted, long before anyone in a governance role sees it: data architecture, serving patterns, resilience, vendor lock-in, and auditability by design.
- [Tutor Certificate Verification](https://thesaaii.com/tutor-certificate-verification/)
- [Tutor Certificate](https://thesaaii.com/tutor-certificate/)
- [How SAAII is different (Differentiation FAQ)](https://thesaaii.com/differentiation/): The questions people ask when they're deciding whether SAAII is different from a normal online course, or from a single-badge certificate.
- [AI in Critical Infrastructure](https://thesaaii.com/programmes/ai-in-critical-infrastructure/): Governance of AI safety components in critical infrastructure: Annex III classification, the NIS2 resilience overlay, safety-critical design and testing, and incident response.
- [AI and Consumer Protection](https://thesaaii.com/programmes/ai-and-consumer-protection/): Governance of consumer-facing AI: the duty to disclose AI interaction, manipulation and dark-pattern risk, and the high-risk obligations that apply to AI in credit and insurance decisions.
- [AI in Education](https://thesaaii.com/programmes/ai-in-education/): Governing AI in admissions, assessment, proctoring and generative-AI use in teaching under the EU AI Act's high-risk classifications and the safeguarding duties owed to minors.
- [AI in Legal Practice](https://thesaaii.com/programmes/ai-in-legal-practice/): Governing AI adoption across contract work, litigation support and client-facing advice under the EU AI Act and overlapping professional-conduct duties.
- [AI in Media and Creative Industries](https://thesaaii.com/programmes/ai-in-media-and-creative-industries/): Governance of generative AI in newsrooms, publishing, marketing and creative agencies: transparency duties, IP and rights-clearance risk, and content-provenance controls.
- [AI in Employment and the Workforce](https://thesaaii.com/programmes/ai-in-employment-and-the-workforce/): Governance of AI used in recruitment, performance management, promotion and termination decisions, and worker monitoring, brought in line with the EU AI Act's Annex III employment classification.
- [Agentic AI Risk, Testing and Assurance](https://thesaaii.com/programmes/agentic-ai-risk-testing-and-assurance/): A structured approach to the risk profile unique to agentic systems: adversarial testing and red-teaming, independent assurance, and an operating framework that ties risk, testing and assurance together.
- [Agentic AI Security and Identity](https://thesaaii.com/programmes/agentic-ai-security-and-identity/): The security layer underneath agentic systems: agent identity and authentication, least-privilege access, credential lifecycle management and defences against prompt injection and tool misuse.
- [Agentic AI Governance and Accountability](https://thesaaii.com/programmes/agentic-ai-governance-and-accountability/): A practical framework for governing AI agents once they are operating inside real workflows: ownership, delegated authority, escalation design, audit and incident response.
- [Agentic AI Foundations](https://thesaaii.com/programmes/agentic-ai-foundations/): A working understanding of agentic AI: systems that plan, use tools and take action, not just generate content, and the governance foundations to oversee them safely.
- [Fee & Credential Policy](https://thesaaii.com/fee-credential-policy/): A short, plain-language policy covering what a programme fee actually includes, and what happens after you're credentialed. No hidden exam fees.
- [The SAAII Body of Knowledge](https://thesaaii.com/body-of-knowledge/): Every SAAII course and Module Check is drawn from one underlying Body of Knowledge (BoK): 11 subject areas, 64 courses plus the Fellowship tracks, and the module-level domains within each.
- [How SAAII Complements CISSP, CEH, and the Cybersecurity Certification Field](https://thesaaii.com/vs-cissp-ceh/): This is a question we’re asked often enough that it deserves a direct answer: SAAII is not trying to replace your CISSP, CEH, Security+, OSCP or GIAC certification, and if you are choosing between us and one of those for a classic information-security role, choose the classic certification.
- [AI Ethics Practitioner](https://thesaaii.com/programmes/ai-ethics-practitioner/): Move from understanding AI ethics principles to running an ethics practice inside a real organisation: impact assessments at scale, working with the engineers who build the system, proving the function actually works, and navigating the resistance you'll meet along the way.
- [AI Ethics Foundation](https://thesaaii.com/programmes/ai-ethics-foundation/): A foundation-level programme exploring the ethical dimensions of AI systems: fairness and bias, transparency and explainability, accountability, privacy and consent, and how to build ethical practice into real AI development and deployment.
- [Chief AI Officer](https://thesaaii.com/programmes/chief-ai-officer/): The flagship leadership programme for senior leaders holding or moving into a Chief AI Officer, Head of AI, or equivalent enterprise AI leadership mandate: scope and authority, strategy, operating model, governance, investment, adoption, and leading through disruption.
- [AI Fundamentals](https://thesaaii.com/programmes/ai-fundamentals/): A clear, jargon-free grounding in what AI actually is, how it works, how to use it well at work, and how to think about its risks, for anyone with no prior AI background.
- [AI GRC Practitioner](https://thesaaii.com/programmes/ai-grc-practitioner/): The practical, hands-on counterpart to AI Governance for the Enterprise: how to actually run an AI GRC function day to day: inventory, classification, control library, assurance, and board reporting, in practice.
- [AI Security Fundamentals](https://thesaaii.com/programmes/ai-security-fundamentals/): Recognise and defend against the attack surface unique to production AI systems: prompt injection, data leakage, model poisoning, and the incident response playbook a traditional security runbook doesn't cover.
- [Defence](https://thesaaii.com/sectors/defence/): AI governance for defence, security, and critical national infrastructure, under partial EU AI Act exemptions, national security frameworks, and emerging responsible-AI-in-defence principles.
- [Public Sector](https://thesaaii.com/sectors/public-sector/): AI governance for central government, local authorities, arm's-length bodies, and public services, under the EU AI Act, Algorithmic Transparency Recording Standard, and the public sector equality duty.
- [Healthcare](https://thesaaii.com/sectors/healthcare/): AI governance for hospitals, medical devices, insurers, and life sciences, under the EU AI Act, MDR/IVDR, and sector clinical safety frameworks.
- [Financial Services](https://thesaaii.com/sectors/financial-services/): AI governance for banking, insurance, asset management, and payments, under the EU AI Act, sector supervision, and existing model-risk regimes.
- [Press](https://thesaaii.com/press/): For journalists, analysts, and researchers covering AI governance, professional education, or the EU AI Act.
- [Insights](https://thesaaii.com/insights/): Practical writing on AI governance, EU AI Act compliance, and AI risk, from the team behind SAAII's courses.
- [Faculty](https://thesaaii.com/faculty/): SAAII programmes are built and marked by named practitioners with genuine standing in the field, not by anonymous course developers.
- [How Fellow Stage 2 is marked](https://thesaaii.com/sample-work/): This page explains how SAAII marks the written part of the Fellow credential, Stage 2, so you know what is expected before you enrol.
- [Data and Machine Learning Primer](https://thesaaii.com/programmes/data-ml-primer/): A deeper technical primer for professionals who want to understand data, models, and evaluation well enough to challenge and govern them substantively.
- [Foundations of AI for Non-Technical Professionals](https://thesaaii.com/programmes/foundations-of-ai-non-technical/): The technical and conceptual foundations non-technical professionals need to be credible in the room: no prior AI or programming background required.
- [AI Incident Response](https://thesaaii.com/programmes/ai-incident-response/): When an AI system fails, misbehaves, or is questioned by regulators: a practitioner's playbook for detection, response, disclosure, and post-incident learning.
- [Third-Party AI Risk](https://thesaaii.com/programmes/third-party-ai-risk/): Governance and assurance of AI that lives at your suppliers, in your software, and in the tools your teams have already started using.
- [AI Risk and Assurance](https://thesaaii.com/programmes/ai-risk-assurance/): Identifying, measuring, treating, and assuring AI risks across the full lifecycle, for the second and third lines of defence.
- [Board Oversight of AI](https://thesaaii.com/programmes/board-oversight-ai/): What non-executive directors, audit committee chairs, and senior executives need to know to discharge their oversight responsibilities on AI.
- [ISO/IEC 42001 for Practitioners](https://thesaaii.com/programmes/iso-42001-practitioners/): The reference AI management system standard, from clause 4 to clause 10, taught for the people who have to design and defend the system, not audit it.
- [AI Governance for the Enterprise](https://thesaaii.com/programmes/ai-governance-enterprise/): Design, build, and run an AI governance system that actually holds up: in operation, in audit, and under scrutiny.
- [EU AI Act: Enforcement and Case Law](https://thesaaii.com/programmes/eu-ai-act-enforcement/): How the AI Act is being enforced in practice: the AI Office, national competent authorities, the emerging case law, and defensible response strategies.
- [EU AI Act: General-Purpose AI](https://thesaaii.com/programmes/eu-ai-act-general-purpose-ai/): The obligations that fall on providers of general-purpose AI models, and on deployers who build systems on top of them.
- [EU AI Act: High-Risk Systems](https://thesaaii.com/programmes/eu-ai-act-high-risk-systems/): A working practitioner's guide to the substantive obligations that fall on providers and deployers of high-risk AI systems.
- [EU AI Act Foundations](https://thesaaii.com/programmes/eu-ai-act-foundations/): Now enrolling. This programme is live on the platform.
- [Verify a credential](https://thesaaii.com/verify/): Verification service opens with the first credential cohort.
- [How we assess](https://thesaaii.com/rubric/): Every SAAII programme is organised into modules.
- [Frequently asked questions](https://thesaaii.com/faq/): The questions that come up most often, answered honestly. If yours isn't here, write to hello@thesaaii.com and we'll add it.
- [My account](https://thesaaii.com/my-account/)
- [Checkout](https://thesaaii.com/checkout/)
- [Cart](https://thesaaii.com/cart/)
- [Shop](https://thesaaii.com/shop/)
- [Student Registration](https://thesaaii.com/student-registration/)
- [Dashboard](https://thesaaii.com/dashboard/)
- [Cookie Policy](https://thesaaii.com/cookies/): Working draft, version 0.9, awaiting review by SAAII's Data Protection Officer.
- [Terms of Enrolment](https://thesaaii.com/terms/): Working draft, version 0.9: awaiting review by commercial counsel. These terms are displayed as a placeholder pending sign-off.
- [Privacy Policy](https://thesaaii.com/privacy/): Working draft, version 0.9, awaiting final review by SAAII's Data Protection Officer and external counsel.
- [Contact](https://thesaaii.com/contact/): Looking for a quick answer?
- [How we compare](https://thesaaii.com/compare/): The AI governance training market has grown quickly, and there are now good options at almost every price point.
- [For Organisations](https://thesaaii.com/for-organisations/)
- [Sectors](https://thesaaii.com/sectors/)
- [Programmes](https://thesaaii.com/programmes/)
- [Certification](https://thesaaii.com/certification/): SAAII certification is a structured professional credential built for the compliance, legal, risk, and audit professionals who have to make AI compliant in practice.

## Optional

- [Agent (MCP protocol)](websites-agents.hostinger.com/thesaaii.com/mcp)

[comment]: # (Generated by Hostinger Tools Plugin)