Governing and Managing AI Risk
The AI governance frameworks an insurer needs to recognise, the NIST AI Risk Management Framework, ISO/IEC 42001 and the EU AI Act, and how to read an insured's AI governance and controls against them. Learn what good looks like, so a governance answer becomes an underwriting signal.
Read an insured's AI governance the way you read their security controls
Governance is where AI risk is either contained or left to run. This course gives you the frameworks the market is converging on and a practical method for reading how an insured actually governs its AI, so a governance questionnaire stops being a formality and starts informing the terms you offer.
- Describe the NIST AI Risk Management Framework, ISO/IEC 42001 and the EU AI Act in plain terms, and explain what each one asks an organisation to do.
- Read an insured's AI governance and controls, from model inventories and human oversight to testing, monitoring and incident response, and tell substance from a paper policy.
- Recognise what good looks like at each level of AI maturity, and translate a governance gap into the residual exposure it leaves on cover.
- Ask sharper governance questions at submission and renewal, and know which answers should change your appetite, your terms or your price.
Six lessons, about six hours
Self-paced and on demand. Each lesson ends with a short knowledge check; a final assessment, earns the certificate of completion.
01 Why AI governance is now an underwriting question
How governance sits between an AI system and its failures, why it is the single best predictor of controlled AI risk, and what an insurer is really trying to learn when it asks.
02 The NIST AI Risk Management Framework
The Govern, Map, Measure and Manage functions in practical terms, what a NIST-aligned programme looks like on the ground, and how to use it as a checklist when reading a risk.
03 ISO/IEC 42001 and the AI management system
What a certified AI management system requires, how it compares to the ISO controls you already trust, and what certification does and does not tell you about a real risk.
04 The EU AI Act and the regulatory horizon
The risk tiers of the EU AI Act, the duties that fall on providers and deployers, and how compliance obligations elsewhere are shaping the exposures you will be asked to cover.
05 Reading an insured's AI governance and controls
A repeatable method for working through a submission: model inventory, human oversight, testing and validation, monitoring, vendor management and incident response, and spotting the gaps.
06 What good looks like, and the questions to ask
Benchmarks for strong, adequate and weak AI governance, the questions that separate them at submission and renewal, and the final assessment that earns your certificate of completion.
Built for the desk that has to judge how well AI is governed
You do not need to be a compliance specialist, and you do not need to memorise the frameworks. The course gives you enough of each to read a governance answer with judgement, and it always ties governance back to the exposure that remains on cover.
Underwriters
You want a governance section of a submission to change your terms, not just sit in the file, and a way to tell strong controls from a template.
Brokers and account teams
You want to help clients present their AI governance well, and to know which improvements will actually move an underwriter.
Risk and compliance
You are building or assessing an AI programme and want to see it through the eyes of the market that will price the residual risk.
One core course in a larger certification
Governing and Managing AI Risk is one of the 4 core courses that make up the CAIIP certification, the Certified AI Insurance Practitioner. Complete all of them, choose one specialization, and pass the proctored exam to become certified. CAIIP is coming 2026.
AI Foundations
View courseUnderstanding AI Risks and Exposures
View courseGoverning and Managing AI Risk
Assessing and Insuring AI Exposure
View courseAI Risk in Cyber Insurance
View courseAI Risk in Liability Insurance
View courseAI Risk in Property Insurance
View courseAI Risk in Motor and Autonomous Systems
View courseAbout this certificate course
No. Governing and Managing AI Risk is a certificate course, which is shorter than a certification. You earn a certificate of completion, not a certification credential.
No. The course explains the NIST AI RMF, ISO/IEC 42001 and the EU AI Act in plain terms and always ties them back to underwriting judgement, not legal interpretation. It assumes an insurance or risk role, not a legal one.
There is a final assessment. Each lesson has a short knowledge check along the way, and the final assessment confirms you are ready for the certificate of completion.
No. It is a one-off purchase. There is no renewal and no maintenance fee. Your certificate of completion does not expire, though the frameworks it covers will keep evolving.
Yes. Governing and Managing AI Risk is one of the four core courses of the CAIIP certification, the Certified AI Insurance Practitioner, which is coming in 2026. Taking it on its own still earns the standalone certificate of completion.
Turn a governance answer into an underwriting signal
About six hours to read an insured's AI governance against the frameworks the market is adopting, and know what good looks like. A certificate course, and a CAIIP core course.