Six domains. Twelve modules. One credentialed practitioner.
Every module produces an artifact a practitioner would actually deliver on the job. The capstone assembles them into a defensible AI governance program.
Domain 1 · Week 1
AI and Governance Foundations
Make the case for AI governance and speak fluently about how modern AI actually works.
Module 01
AI Foundations and the Governance Mandate
Build an honest understanding of what AI is and why governance is now non-negotiable.
Lessons
·Lesson 1.1 · What AI Actually Is (and What It Is Not)
·Lesson 1.2 · The AI Landscape: Tools, Systems, and What Lives in Your Organization Right Now
·Lesson 1.3 · Why Governance Exists: What Goes Wrong Without It
·Lesson 1.4 · The Business Case for AI Governance
·Lesson 1.5 · The Legal and Regulatory Case for AI Governance
·Lesson 1.6 · What an AI Governance Practitioner Does
Portfolio Artifact
A one-page case for AI governance in your organization.
Domain 2 · Weeks 2 to 4
Law, Policy and Standards
Map the regulatory landscape and stand up the operating model, charter, and policy that govern AI in your context.
Module 02
The Regulatory Landscape
Map the laws, frameworks, and standards that govern AI in your context.
Lessons
·Lesson 2.1 · How Regulation Works: Laws, Frameworks, and Standards Are Not the Same Thing
·Lesson 2.2 · The EU AI Act: What It Requires and Who It Affects
·Lesson 2.3 · The NIST AI Risk Management Framework: Structure and Application
·Lesson 2.4 · ISO/IEC 42001: The AI Management System Standard
·Lesson 2.5 · Sector Rules: Healthcare, Finance, and Public Sector Obligations
·Lesson 2.6 · Emerging Law: How to Track What Is Coming Before It Lands
Portfolio Artifact
A regulatory map for your organization and use cases.
Module 03
Standing Up AI Governance
Design a governance operating model that makes AI decisions clear, accountable, and defensible.
Lessons
·Lesson 3.1 · Governance Models: Centralized, Federated, and Hybrid
·Lesson 3.2 · Designing Your AI Oversight Board
·Lesson 3.3 · Defining Roles and Decision Rights Across the Organization
·Lesson 3.4 · AI Intake and Review: Building the Process
·Lesson 3.5 · RACI for AI: Mapping Accountability at Every Stage
·Lesson 3.6 · Balancing Speed and Control So Governance Does Not Become a Blocker
Portfolio Artifact
A draft AI governance charter and operating model.
Module 04
Writing AI Policy and Standards
Turn principles into policy people can actually follow.
Lessons
·Lesson 4.1 · Policy Architecture: The Difference Between a Policy, a Standard, and a Procedure
·Lesson 4.2 · Writing Acceptable Use Policy People Will Actually Follow
·Lesson 4.3 · Internal Standards and Controls for AI
·Lesson 4.4 · Approval Gates: How to Design AI Sign-Off Without Creating Bottlenecks
·Lesson 4.5 · Handling Exceptions and Enforcing Policy Without Constant Escalation
·Lesson 4.6 · Keeping Policy Current as the Technology Changes
Portfolio Artifact
A draft AI policy and acceptable use standard.
Domain 3 · Weeks 5 to 6
Responsible AI, Data, Privacy and Security
Build responsibility, privacy, and security into every AI decision before a system ever ships.
Module 05
Responsible AI: Ethics, Bias, and Transparency
Build responsibility into every AI decision.
Lessons
·Lesson 5.1 · How Bias Enters AI Systems: Sources, Types, and Where to Look
·Lesson 5.2 · Fairness Frameworks: What They Mean and How to Apply Them
·Lesson 5.3 · Transparency and Explainability: What You Are Required to Disclose and to Whom
·Lesson 5.4 · Human Oversight: Designing for Meaningful Human Control
·Lesson 5.5 · Harm Prevention: Identifying Risk Before Deployment
·Lesson 5.6 · Harm Redress: What to Do When Something Goes Wrong
Portfolio Artifact
A responsible AI principles set and review checklist.
Module 06
Data, Privacy, and Security for AI
Get your data, privacy, and security posture ready for AI.
Lessons
·Lesson 6.1 · Data Quality for AI: Why Bad Data Is a Governance Problem, Not Just a Technical One
·Lesson 6.2 · Data Governance Requirements Specific to AI Systems
·Lesson 6.3 · PII and Privacy Law as Applied to AI
·Lesson 6.4 · Records, Retention, and What You Must Keep
·Lesson 6.5 · Security Controls and Access Management for AI Systems
·Lesson 6.6 · Third-Party Data Risk: What Your Vendors Are Doing With Your Data
Portfolio Artifact
A data and privacy readiness assessment.
Domain 4 · Weeks 7 to 8
Risk and Lifecycle Management
Run a real AI risk assessment and govern models across their full lifecycle, not just at launch.
Module 07
AI Risk Management
Identify, assess, and manage AI risk like a professional.
Lessons
·Lesson 7.1 · The AI Risk Taxonomy: Categories, Classifications, and How to Use Them
·Lesson 7.2 · Running an AI Risk Assessment Step by Step
·Lesson 7.3 · Mapping Your Risk Posture to the NIST AI RMF
·Lesson 7.4 · Building and Maintaining a Live AI Risk Register
·Lesson 7.5 · Risk Treatment: Mitigate, Transfer, Accept, or Avoid
·Lesson 7.6 · Escalation Paths and Risk Reporting to Leadership
Portfolio Artifact
An AI risk assessment and register.
Module 08
Model and System Lifecycle Governance
Govern AI across its whole lifecycle, not just at launch.
Lessons
·Lesson 8.1 · The AI Lifecycle: Every Stage and What Governance Looks Like at Each One
·Lesson 8.2 · Model Documentation Requirements: What to Capture and Why
·Lesson 8.3 · Model Cards: How to Write Them and What They Need to Contain
·Lesson 8.4 · Validation and Testing Before Deployment
·Lesson 8.5 · Change Management: Governing AI When the Model or System Updates
·Lesson 8.6 · Decommissioning: How to Retire an AI System Responsibly
Portfolio Artifact
A model documentation set and lifecycle control plan.
Domain 5 · Weeks 9 to 10
Evaluation, Procurement and Operations
Evaluate vendors and tools without hype, and operationalize governance inside real workflows.
Module 09
Evaluating and Procuring AI
Evaluate and buy AI tools and vendors with eyes open.
Lessons
·Lesson 9.1 · How to Read a Vendor Claim Without Getting Sold
·Lesson 9.2 · Evaluating Foundation Models and Third-Party AI Systems
·Lesson 9.3 · Avoiding Lock-In: What to Negotiate Before You Sign
·Lesson 9.4 · Contract and Data Terms That Protect Your Organization
·Lesson 9.5 · Third-Party and Supply-Chain Risk in AI Procurement
·Lesson 9.6 · Build vs. Buy: How to Make the Decision and Defend It
Portfolio Artifact
A vendor and model evaluation scorecard.
Module 10
Operationalizing Governance
Make governance run in the real workflow, including hands-on with the tools.
Lessons
·Lesson 10.1 · Embedding Intake and Review Into Real Workflows at Scale
·Lesson 10.2 · Governing AI Assistants: Claude, Copilot, and ChatGPT Under Guardrails
·Lesson 10.3 · What to Never Put Into an AI Tool and How to Train Your Teams on That
·Lesson 10.4 · Use Case Classification: Matching Governance Rigor to Risk Level
·Lesson 10.5 · When Governance Says No: How to Handle Rejected Use Cases
·Lesson 10.6 · Building Governance That Helps the Business Move Faster, Not Slower
Portfolio Artifact
A governance intake workflow with guardrails.
Domain 6 · Weeks 11 to 12
Monitoring, Audit and Assurance
Prove governance works through monitoring, audit readiness, and a defensible capstone program.
Module 11
Monitoring, Audit, and Assurance
Prove governance works and keep proving it.
Lessons
·Lesson 11.1 · What Ongoing AI Monitoring Looks Like and How to Build It
·Lesson 11.2 · AI Incident Response: What to Do When a System Fails or Causes Harm
·Lesson 11.3 · Audit Readiness: How to Prepare Before the Auditor Arrives
·Lesson 11.4 · The Metrics That Actually Matter to Boards and Regulators
·Lesson 11.5 · Reporting AI Governance Performance to Leadership
·Lesson 11.6 · Continuous Improvement: Keeping Governance Current as AI Evolves
Portfolio Artifact
A monitoring and audit plan with a reporting dashboard outline.
Module 12
Capstone: From Practitioner to Credentialed
Prove practitioner-level capability across all six domains.
Lessons
·Lesson 12.1 · Assembling Your Practitioner Portfolio Across All Six Domains
·Lesson 12.2 · Designing a Complete AI Governance Program for a Real Organization
·Lesson 12.3 · Building Your 90-Day Implementation Plan
·Lesson 12.4 · Capstone Submission: What Taz Reviews and What She Looks For
·Lesson 12.5 · After the Credential: How to Use the TBS-AIGP in Your Role and Your Career
Portfolio Artifact
The capstone: a complete AI governance program and 90-day plan, assessed for the Certified AI Governance Practitioner designation.