ED-EL-06 AI Risk and Regulation for Decision-Makers - e-Learning
Duration: Approximately 6 hours of e-Learning content (unlimited access for 6 months)
Training format: Asynchronous (e-Learning)
Language: English, French
CPE credits: 6
Elevate your skills and career potential with expert-led courses from C-Risk Education
AI is already in the organization, often without governance, and a dense body of European regulation now applies to it. This e-Learning course gives decision-makers a clear reading of that regulation, starting with the EU AI Act, and helps them meet the AI literacy obligation it introduces.
The program goes beyond formal compliance. Ticking boxes with gut-feel, qualitative ratings protects nothing, and regulators increasingly expect a risk-based, proportionate and defensible approach. Participants learn to read, demand and act on a quantified view of AI risk, expressed as financial loss exposure with the FAIR™ Standard rather than as colors on a matrix.
Through video modules, interactive materials and real AI incidents and enforcement cases, participants build a map of AI risk on which to place their own use cases and leave with practical governance tools they can reuse with their board and teams.
The course remains accessible online for six months and is available in English and French, allowing learners to progress at their own pace and revisit key concepts.
€495 excl. VAT per person ED-EL-06.1
€1,980 excl. VAT / 5 participants ED-EL-06.2
€2,970 excl. VAT / 10 participants ED-EL-06.3
.svg)
Approximately 6 hours of e-Learning content (unlimited access for 6 months)
Asynchronous (e-Learning)
6
By the end of the course, participants will be able to:
- Explain the risk-based logic of the EU AI Act and classify an AI use case across its risk tiers, including the general-purpose AI regime
- Identify which regulations apply to an AI use case (AI Act, GDPR, NIS2, DORA, CRA, DSA, DMA, Data Act) and the governance obligations they trigger
- Distinguish compliance in form (ticking boxes) from compliance in substance (defensible, risk-based decisions)
- Explain how the FAIR™ framework expresses AI risk as financial loss exposure and why qualitative ratings fail the defensibility test
- Demand and interpret a quantified AI risk statement to prioritize compliance and security investments
- Assemble the governance artifacts that evidence AI governance and address the AI literacy obligation of Article 4
Who Should Attend
Board and executive committee members (CEO, CFO, CISO, General Counsel), and the second-line functions that advise and decide on AI, technology and compliance (risk, compliance, data protection, legal).
Prerequisites
None. General familiarity with cybersecurity, risk or compliance topics is beneficial but not required. No technical or statistical background is assumed.
AI Risk: Why You? Why Now?
- What counts as AI in the organization
- Provider versus deployer
- Shadow AI and ungoverned adoption
- The AI literacy obligation (Article 4), already in force
Building an AI Risk Map for Executives
- Five AI risk families: fundamental rights, data leakage, AI-specific security, reliability and over-reliance, governance failure and shadow AI
- Third-party and supply-chain AI
- Regulatory hooks and types of loss for each family
- Real-world cases and enforcement actions
The EU AI Act and the 4 Levels of AI Risk
- Prohibited, high-risk, limited (transparency) and minimal risk
- The general-purpose AI (GPAI) regime
- How a use case moves through the tiers
- Application timeline: what applies and when
The Regulatory Ecosystem
- Data: GDPR, DSA, DMA, Data Act
- Cybersecurity: NIS2, CRA, DORA
- Voluntary standards (ISO/IEC 42001, ISO/IEC 23894) and presumption of conformity
- Why Europe chose trustworthy AI
From Regulation to Decision
- Limits of box-ticking and qualitative ratings
- Reading AI risk as financial loss exposure with the FAIR™ Standard
- Why a defensible figure beats a color
- Questions to ask to obtain a decision-ready AI risk view
Sector Application: Finance and Health
- Finance: DORA and the AI Act
- Health: medical device regulation and the AI Act
- How obligations stack and where the sector regime is the binding constraint
Compliance and Evidence File
- Governance artifacts to be able to produce
- RACI for each obligation
- AI literacy program mandate (Article 4)
- A 90-day action plan
Co-developed by the C-Risk Education team, experts in FAIR-based risk quantification, and Sabine Marcellin, lawyer specializing in AI law and the EU AI Act.
- Multiple-choice knowledge checks at the end of each module to validate understanding of key concepts
- Certificate of completion, contributing to evidence of the AI literacy obligation under Article 4 of the EU AI Act
- Interactive modules accessible online 24/7 for 6 months, in English and French
- Downloadable governance tools, including an AI exposure scorecard, AI risk map, regulatory exposure map, decision-maker's question set, sector briefings, and an executive 90-day plan
Advance Your Career with Cyber Risk Management Training
E-learning platform and instructor-led courses in quantification, cyber risk frameworks, and data-driven decision-making. C-Risk Education equips you with the skills to analyze and manage cyber risk effectively. Our training covers multiple methodologies and frameworks: cyber risk quantification, EBIOS RM, third-party risk management, and advanced threat and control assessment techniques. Learn practical, immediately applicable skills across the full spectrum of modern cyber risk management.
.svg)
Learn data-driven cyber risk management with FAIR standard. 3-hour instructor-led course on quantifying cyber risk in financial terms.
Learn FAIR™ cyber risk quantification at your own pace. 3-hour e-learning covering risk management fundamentals and financial risk analysis.
Master FAIR™ methodology in 12 hours. Learn quantitative cyber risk analysis, overcome qualitative limits, and make data-driven security decisions.
Master FAIR™ cyber risk quantification with 12 hours of e-learning. Model risk scenarios, estimate loss factors, prepare for Open FAIR™ 2 certification.
Meet your board's cyber risk oversight obligations under NIS2, DORA, and the EU AI Act, and learn to govern cyber risk with the same rigor as financial risk. Full-day executive program for management bodies and senior leaders.
Learn to quantify security control effectiveness using FAIR-CAM™. Model risk reduction, analyze attack chains, and integrate controls into FAIR™ analyses.
.jpg)
Master FAIR-CAM™ to quantify security control effectiveness. 10-hour e-learning for FAIR practitioners.
Learn to quantify third-party cyber risks using FAIR™. 10-hour e-learning course covering TPRM lifecycle, risk scenarios, and financial quantification.
Fulfil your DORA and NIS2 training obligations and learn why cybersecurity is a governance issue, and how to oversee it effectively. 5-hour e-learning for executives and board members.