AI Ethics, Security & Governance for Leaders ISI-1620

AI Ethics, Security & Governance for Leaders Course ISI - 1 6 20 1 Day Instructor - led, Hands on Course Description This practical one - day course equips business and operations leaders with the knowledge and tools to implement safe, responsible AI Who Should Attend? This controls. Students will learn to recognize common AI risks including privacy violations, IP leakage, bias, and data exposure, and apply proven safe- use patterns and review processes. The course is tool - agnostic and emphasizes hands - on exercises including red- teaming, evaluation design, and policy creation. Course Objectives In this course, you will learn how to: R ecognize and assess compliance officers, and anyone responsible for safe AI adoption in their organization. No technical background is required —the focus is on practical risk management, governance, and organizational enablement . AI risks : privacy violations , intellectual property leakage, bias , and data exposure A pply safe- use patterns and review processes to mitigate identified risks D esign and implement evaluation frameworks using golden datasets , rubrics , and audit processes C onduct vendor assessments using model cards , data processing agreements (DPA s ), and logging requirements P erform lightweight red - team exercises to identify vulnerabilities including prompt injection , over - reliance, and jailbreaks C reate governance frameworks and policies that balance innovation with risk management and compliance A lign AI initiatives with legal , compliance, and IT T opics AI risk landscape: privacy, IP protection, bias, and data leakage Stakeholder roles and responsibilities: business, IT, legal, and vendor management without impeding delivery timelines . Data protection in practice: PII handling, IP safeguards, prompt security, and output validation Prompt de - risking techniques and secure prompt engineering patterns Evaluation frameworks: golden dataset construction, rubric design, and audit processes Evaluation card templates and documentation standards Vendor procurement and assessment: model cards, DPAs, logging, and compliance requirements Red - teaming methodologies: prompt injection, jailbreaks, over - reliance testing Governance frameworks: RACI matrices, change control, and communication strategies Responsible AI policy development and implementation Prerequisites Prior to attending, students should have: N o specific technical prerequisites required U nderstanding of organizational governance and risk management concepts ( helpful but not required) I nterest in responsible AI adoption and risk mitigation M odern web browser with internet access O ptional : O rganization' s policy documents for tailoring exercises to specific context C ourse Outline Module 1: AI Risk Landscape and Stakeholder Roles Understanding AI - Specific Risks o Privacy violations and PII exposure o Bias, fairness, and discrimination concerns o Hallucinations, accuracy, and reliability issues Stakeholder Ecosystem o Business ownership and accountability o IT and security responsibilities o Legal and compliance requirements o Vendor management and procurement oversight Risk Assessment Framework o Identifying high- risk use cases o Risk scoring and prioritization o Mitigation strategy selection Module 2: Data Protection in Practice PII and Sensitive Data Handling o Identifying PII in prompts and outputs o Data minimization strategies o Anonymization and pseudonymization techniques Intellectual Property Protection o Output review and IP filtering o Model training data considerations Hands - On Lab 1: De - Risk This Prompt o Analyze problematic prompts for data exposure o Rewrite prompts to prevent leakage o Identify and mitigate bias in prompt design o Test improved prompts for safety Module 3: Evaluation and Monitoring Building Evaluation Frameworks o Golden dataset construction and management o Rubric design for systematic assessment o Human evaluation vs. automated metrics Audit and Compliance Processes o Regular review cycles and cadence o Documentation requirements o Compliance reporting and audit trails Hands - On Lab 2: Build an Evaluation Card o Select a real organizational use case o Define evaluation criteria and rubrics o Create golden dataset examples o Design review process and documentation o Complete evaluation card template Module 4: Procurement and Vendor Management Model Cards and Documentation Review o Understanding model capabilities and limitations o Training data composition and bias assessment o Performance metrics and benchmarks Data Processing Agreements o DPA requirements and key provisions o Data residency and sovereignty o Subprocessor management Logging and Monitoring Requirements o Audit log specifications o Retention policies and access controls o Incident response and breach notification Module 5: Red

• Teaming Fundamentals

Common Attack Vectors o Prompt injection and manipulation o Jailbreaks and constraint circumvention o Over - reliance and automation bias Red - Team Exercise Design o Threat modeling for AI systems o Test scenario development o Finding documentation and severity assessment Hands - On Lab 3: Red - Team a Simple Assistant o Set up test environment with sample assistant o Attempt prompt injection attacks o Test for jailbreaks and constraint violations o Document findings with severity ratings o Propose mitigations and fixes Module 6: Governance Without Friction Organizational Structures o RACI matrix for AI initiatives o Centers of Excellence and champions programs o Review boards and approval processes Change Control and Communication o Lightweight review processes o Stakeholder communication strategies o Balancing speed with safety Hands - On Lab 4 - Capstone: Responsible AI Policy and C hecklist o Draft 2 - page Responsible AI policy for your organization o Create pre- deployment review checklist o Define escalation paths and approval workflows o Design enablement materials for business users o Present policy and implementation plan