AI Risk Management with NIST and ISO 42001

Learn how to manage AI risks using the NIST AI Risk Management Framework and ISO/IEC 42001. This course covers AI governance, risk assessment, compliance, monitoring, and management system best practices for responsible AI.

$59.99
  • 3 hours
  • English
  • Certificate
  • Online
  • Last Updated on 23 Sep, 2026
CPDQS
7-day money-back guarantee badge icon.
Secure SSL encryption badge icon with padlock.
AI risk management training covering NIST and ISO 42001 frameworks, risk assessment, governance, compliance, and AI security practices.

Course Overview

AI Risk Management with NIST and ISO/IEC 42001 is a professional training course designed for individuals and organizations seeking to understand how artificial intelligence risks can be governed, assessed, documented, monitored, and improved through recognized AI risk and management system approaches. As AI systems become more widely used across global workplaces, organizations must address risks related to bias, privacy, safety, security, transparency, accountability, third-party use, operational failures, and regulatory expectations.

This AI Risk Management with NIST and ISO 42001 course covers the foundations of AI risk management, trustworthy AI, responsible governance, and the role of ownership in AI oversight. Participants will explore the purpose and structure of the NIST AI Risk Management Framework, including its Govern, Map, Measure, and Manage functions. The curriculum also introduces ISO/IEC 42001 as an AI management system standard, covering leadership duties, documentation, internal audit, management review, and continual improvement.

The course connects risk frameworks, legal alignment, ethical expectations, vendor risk, Shadow AI, human oversight, corrective action, and sustainable AI governance program development.

What’s Included in the AI Risk Management Course

Participants will receive structured learning aligned with the course curriculum and focused on AI risk governance, NIST AI RMF, and ISO/IEC 42001, including:

  • Curriculum-based professional training

  • AI risk management foundation knowledge

  • NIST AI RMF concepts and functions

  • ISO/IEC 42001 management system understanding

  • Legal, ethical, and regulatory alignment coverage

  • Vendor risk, Shadow AI, and monitoring concepts

  • Certificate upon successful completion

What You'll Learn

  • Understand AI risk management concepts, trustworthy AI principles, and responsible governance responsibilities.
  • Identify key AI risk areas, including bias, privacy, safety, security, transparency, and operational reliability.
  • Analyze the purpose and structure of the NIST AI Risk Management Framework.
  • Apply NIST AI RMF functions, including Govern, Map, Measure, and Manage, to AI risk oversight.
  • Assess the purpose, scope, and core requirements of ISO/IEC 42001 AI management systems.
  • Evaluate how NIST AI RMF can be integrated with ISO/IEC 42001 governance controls.
  • Implement AI inventory, risk classification, impact assessment, and risk treatment planning concepts.
  • Monitor AI vendor risk, Shadow AI, model drift, incidents, escalation, corrective action, and continual improvement.

Requirements for AI Risk Management Training

No specific prior experience or qualifications are required to participate in this course. A general interest in AI governance, risk management, compliance, internal audit, privacy, information security, vendor oversight, or responsible AI may be helpful, but it is not mandatory.

Why Choose Us

This AI Risk Management course is designed to help learners understand NIST AI RMF and ISO/IEC 42001 through a clear, structured, and professionally relevant curriculum.

  • Curriculum aligned with AI risk, trustworthy AI, governance ownership, and accountability priorities
  • Clear coverage of NIST AI RMF Govern, Map, Measure, and Manage functions
  • Professional training suitable for individual learners, business teams, and organizational decision-makers
  • Balanced focus on risk management, documentation, audit readiness, legal alignment, and continual improvement
  • Workplace-relevant knowledge for compliance, risk, privacy, security, audit, and governance functions
  • Learner-focused structure that supports both technical and non-technical professional audiences
  • Professional development support through structured learning and successful-completion certification

Career Paths in AI Risk Management

This AI Risk Management with NIST and ISO 42001 course supports professional development across roles and responsibilities that require knowledge of AI governance, risk controls, management systems, documentation, compliance alignment, and responsible AI oversight.

Relevant career areas and responsibilities include:

  • AI Risk Management
  • AI Governance and Compliance
  • Enterprise Risk Management
  • Internal Audit and Assurance
  • Privacy and Data Protection Governance
  • Information Security and AI Risk Oversight
  • Vendor and Third-Party Risk Management
  • Responsible AI Program Management

Certification

Certification

A certificate is issued upon successful completion of the course. This certificate demonstrates that the participant has completed structured professional training in AI Risk Management with NIST and ISO/IEC 42001 and has developed knowledge of the main topics covered in the curriculum.

Certification

Course Curriculum

7 sections24 lectures3 hours

Module 1: Foundations of AI Risk Management

4 Lectures30 minutes
▶ AI Risk, Trustworthy AI, and Responsible Governance
▶ Why AI Risk Management Matters in Global Workplaces
▶ Key Risk Areas: Bias, Privacy, Safety, Security, and Transparency
▶ Roles, Accountability, and Governance Ownership
▶ Quiz
▶ Purpose and Structure of NIST AI RMF
▶ Govern: Building AI Risk Culture and Oversight
▶ Map: Understanding Context, Use Case, and Impact
▶ Measure and Manage: Testing, Monitoring, and Risk Treatment
▶ Quiz
▶ Purpose and Scope of ISO/IEC 42001
▶ AI Management System Requirements and Leadership Duties
▶ AI Policy, Objectives, Roles, and Documentation
▶ Internal Audit, Management Review, and Continual Improvement
▶ Quiz
▶ Connecting NIST Govern, Map, Measure, and Manage to ISO/IEC 42001
▶ Building an AI Inventory and Risk Classification Process
▶ AI Impact Assessment and Risk Treatment Planning
▶ Creating an Audit-Ready AI Governance Control System
▶ Quiz
▶ Global AI Governance Laws, Guidelines, and Professional Standards
▶ Labor, Privacy, Safety, and Anti-Discrimination Considerations
▶ EU AI Act, OECD Principles, UNESCO Guidance, and Sector Expectations
▶ Evidence-Based Compliance, Documentation, and Accountability
▶ Quiz
▶ AI Vendor Risk, Shadow AI, and Third-Party Controls
▶ Monitoring Model Drift, Incidents, and Operational Failures
▶ Human Oversight, Escalation, and Corrective Action
▶ Building a Sustainable AI Risk Management Program
▶ Quiz

Frequently Asked Questions

AI risk management is the structured process of identifying, assessing, treating, monitoring, and reviewing risks associated with artificial intelligence systems. It can cover risks involving bias, privacy, safety, security, transparency, accountability, operational reliability, third parties, and regulatory requirements.

AI systems can affect business processes, customers, employees, and organizational decisions. AI risk management helps organizations establish appropriate governance, identify potential problems, assign accountability, implement controls, and monitor risks as AI systems and their operating environments change.

The four NIST AI RMF functions are Govern, Map, Measure, and Manage.

Govern establishes organizational policies, accountability, and risk culture. Map helps organizations understand the context, intended use, and potential impacts of an AI system. Measure focuses on evaluating and monitoring risks. Manage focuses on prioritizing and treating identified risks.

An Artificial Intelligence Management System, or AIMS, is an organizational management system for governing the responsible development, provision, or use of AI. It connects policies, objectives, responsibilities, processes, controls, evaluation, and continual improvement.

AGC's recent ISO 42001 Risk Management guide explains how risk assessment and treatment fit within a wider AIMS.

NIST AI RMF is a voluntary AI risk-management framework organized around Govern, Map, Measure, and Manage. ISO/IEC 42001 is an AI management-system standard that provides requirements and a structured system for establishing and continually improving organizational AI governance.

They can therefore be used together rather than treated as competing frameworks.

Yes. Organizations can use ISO/IEC 42001 as the management-system structure while using NIST AI RMF to strengthen AI risk-management activities within that structure. Integration should reflect the organization's context rather than assuming a mandatory one-to-one mapping.

NIST and ISO 42001 integration means coordinating the two approaches through one AI governance and risk-management operating model. Organizations can potentially share appropriate inventories, risk assessments, controls, owners, evidence, and monitoring processes while keeping the requirements and mappings of each framework clear.

See AGC's NIST and ISO 42001 Integration guide for a deeper explanation.

AGC has several related resources. The AI Risk Management guide provides a broader overview of AI risk identification, assessment, and management. The NIST AI Risk Management Framework guide explains the four NIST AI RMF functions. The ISO 42001 Risk Management guide focuses on risk management within an AIMS. The NIST and ISO 42001 Integration guide explores how the two approaches can be coordinated.

The course is designed to provide structured professional knowledge of AI risk management using NIST AI RMF and ISO/IEC 42001, including governance, risk assessment, controls, compliance alignment, audit readiness, monitoring, vendor risk, Shadow AI, human oversight, incident management, and continual improvement.