AI Compliance & Governance Essentials
AI rules are now enforceable law in major markets, and enterprise customers expect compliance proof from their vendors. This course maps the landscape as of August 2026, including the EU AI Act, the US state patchwork, and privacy law, then teaches the NIST AI Risk Management Framework as the stable core. You'll learn the daily practices that make a program real: an AI use inventory, controls for consequential decisions, disclosure, audit-ready records, and incident response. You'll finish able to assemble a right-sized AI compliance program and keep it current.
Course details
Duration
57m 22s
Lectures
16
Video
1 hour
Quizzes
1
Level
Beginner
Course Description
AI governance has moved from principles and pledges to enforceable rules, and pressure now arrives through customers as much as regulators. This course builds working compliance literacy: it anchors on principles that hold steady and stamps the specifics that move with an as-of date of August 2026.
What you'll learn
- How laws, frameworks, and standards differ, and which rules apply to your organization
- The EU AI Act's risk tiers, current timeline, and reach beyond Europe
- The US state patchwork, and how privacy law already governs AI data
- The NIST AI RMF's four functions: Govern, Map, Measure, and Manage
- Building an AI use inventory and controlling high-risk, consequential uses
- Disclosure, audit-ready documentation, incident response, and staying current
Who it's for
Compliance, legal-operations, risk, HR, IT, and business leaders who use, buy, or oversee AI and need to run it inside the rules.
16 short video lessons in three modules: The AI Regulatory Landscape; The NIST AI Risk Management Framework; and Compliance in Daily Practice.
This course is educational and is not legal advice. Consult qualified counsel for decisions about your organization.
Module 1: The AI Regulatory Landscape
-
1.1 Why AI Compliance Matters NowFrom ethics talk to enforceable law — and how to learn a moving target.
In this lesson:
- Explain why AI compliance became a business requirement
- Name the four kinds of compliance stakes
- Adopt the framework-plus-as-of-date learning approach
-
1.2 The Global Map
Laws, frameworks, and standards — three species of rules and who they bind.
In this lesson:
- Distinguish laws, frameworks, and standards
- Name the major landmarks of each type
- Determine which rules apply to a given organization
-
1.3 The EU AI Act Essentials
Risk tiers, current obligations, and why US companies care.
In this lesson:
- Describe the EU AI Act's four risk tiers
- State which obligations apply now vs. later
- Explain the Act's extraterritorial reach
-
1.4 The US Landscape
Federal direction, the state patchwork, and living with volatility.
In this lesson:
- Describe the US approach: no comprehensive federal law
- Name the live state-law patterns
- Track the landscape without drowning in it
-
1.5 Privacy Laws Meet AI
How existing privacy law governs AI's training data, prompts, and outputs.
In this lesson:
- Identify the three AI data exposure points
- Apply core privacy principles to AI contexts
- Handle rights requests involving AI systems
Module 2: The NIST AI Risk Management Framework
-
2.1 Framework Thinking
Why the NIST AI RMF is the stable spine of AI compliance practice.
In this lesson:
- Explain why frameworks outlast statutes
- Describe the NIST AI RMF's origin and status
- Name the four functions
-
2.2 GOVERN: Policies, Roles, Accountability
The foundation function — structure before systems.
In this lesson:
- Describe the outcomes of the Govern function
- Assign AI risk ownership
- Right-size governance to organizational scale
-
2.3 MAP: Context and Risk Identification
Understanding each AI use case and enumerating what could go wrong.
In this lesson:
- Map an AI use case to its business context
- Enumerate risks across the five categories
- Maintain a use-case risk register
-
2.4 MEASURE: Testing, Metrics, Documentation
Evaluating AI systems — and proving you did.
In this lesson:
- Define measurable evaluation criteria for AI systems
- Apply buyer-side testing to third-party AI
- Document results so they count
-
2.5 MANAGE: Treating, Monitoring, Responding
Acting on findings — and closing the loop back to governance.
In this lesson:
- Choose among the four risk treatments
- Monitor deployed AI for drift
- Close the loop from findings back into Govern
Module 3: Compliance in Daily Practice
-
3.1 The AI Use Inventory
Every compliance program starts with one question: what AI are we using?
In this lesson:
- Explain why the inventory is the foundation
- Build an inventory with the six core fields
- Find shadow AI and keep the inventory alive
-
3.2 High-Risk Use Cases
Consequential decisions — where every law converges, with hiring as the live case.
In this lesson:
- Recognize the consequential-decision pattern across laws
- Apply the heightened controls to hiring AI
- Adopt the safe posture for any consequential use
-
3.3 Transparency & Disclosure Duties
When people must know they're dealing with AI — and how to tell them.
In this lesson:
- Identify when disclosure is required
- Apply the two disclosure modes: interaction and content
- Treat transparency as trust practice, not just legal duty
-
3.4 Documentation & Audit Readiness
The artifact set auditors ask for — and habits that keep it current.
In this lesson:
- Assemble the five-artifact documentation set
- Answer audit requests without a scramble
- Build documentation habits that survive real work
-
3.5 AI Incident Response & Reporting
What counts as an AI incident, and the five-step response sequence.
In this lesson:
- Recognize what counts as an AI incident
- Execute the contain-assess-notify-remediate-record sequence
- Know when notification duties and counsel come in
-
3.6 Building the Compliance Program
Assembling everything into a right-sized, living program — the course finale.
In this lesson:
- Assemble the course's pieces into one program
- Treat workforce AI training as a compliance duty
- Run the staying-current discipline
- Complete the AI Compliance & Governance course
AI Compliance & Governance Essentials — Final Exam
Learn at your own pace
Study the materials at your convenience, you can always return to them to repeat
Certificate of completion
Complete every lesson and pass the final exam to earn a RiseCert certificate of completion you can download and share.
Your Name
AI Compliance & Governance Essentials
RISECERT
CERTIFICATE
For demonstrated knowledge and successful completion of all course requirements for:
MM.DD.YYYY
Certificate Date
Ready to get started?
Enroll in AI Compliance & Governance Essentials and earn your RiseCert certificate of completion.
Got Questions? We've Got Answers!
Answers to the most common questions about this course.
What is the AI Compliance & Governance Essentials course?
AI Compliance & Governance Essentials is a RiseCert online course that teaches professionals how to work inside today's AI rules. It covers the global regulatory landscape as of August 2026, the NIST AI Risk Management Framework, and daily compliance practices such as inventories, disclosure, documentation, and incident response. It includes 16 video lessons and a final exam.
Who should take an AI compliance and governance course?
The course suits compliance officers, risk managers, legal-operations staff, HR and IT leaders, procurement teams, and business managers who use, buy, or oversee AI tools. It also fits small-company owners answering enterprise customers' AI vendor reviews, since the course treats customer requirements as a major source of compliance pressure alongside regulators.
Do I need a legal or technical background?
No. AI Compliance & Governance Essentials is written for working professionals, not lawyers or engineers, and explains each law, framework, and practice in plain language with business examples. It builds compliance literacy: understanding obligations, asking the right questions, and running good practices, while recognizing when a question belongs with qualified counsel.
What is the difference between an AI law, a framework, and a standard?
Laws are binding rules passed by governments, and violations bring penalties. Frameworks, such as the NIST AI Risk Management Framework, are voluntary structures for good practice. Standards, such as ISO/IEC 42001, are formal specifications an independent auditor can certify an organization against. The course notes that customer contracts can turn even voluntary frameworks into obligations.
What is the NIST AI Risk Management Framework?
The NIST AI RMF is a voluntary framework from the US National Institute of Standards and Technology for identifying, assessing, and managing AI risk. Version 1.0 was released in January 2023, and a Generative AI Profile followed in 2024. It is organized into four functions: Govern, Map, Measure, and Manage. Module 2 of the course teaches each one.
What does the EU AI Act require, and does it apply to US companies?
The EU AI Act sorts AI into four risk tiers: prohibited, high-risk, transparency, and minimal. As of August 2026, per the course, bans, AI literacy duties, and transparency duties apply, while most high-risk obligations were deferred to late 2027 into 2028. It can reach US companies that sell into the EU, whose AI outputs are used there, or whose customers flow duties down.
Is there a federal AI law in the United States?
As of August 2026, Congress has passed no comprehensive AI statute. The course explains that federal influence comes through existing agencies such as the FTC and EEOC, executive orders, procurement standards, and contested preemption efforts, while most binding AI rules live in state and city laws, such as New York City's bias-audit requirement for automated hiring tools.
What will I be able to do after completing the course?
You'll be able to determine which AI rules apply to your organization, run the Govern, Map, Measure, and Manage functions, build an AI use inventory, apply human-decision, testing, and documentation controls to consequential uses, write plain disclosures, answer audit requests from a known set of five records, follow a five-step incident sequence, and keep your program current.
What topics does the course cover?
Module 1 covers the global map of laws, frameworks, and standards, the EU AI Act, the US landscape, and privacy law. Module 2 covers the NIST AI RMF and its four functions. Module 3 covers the AI use inventory, high-risk uses such as hiring, transparency duties, audit readiness, incident response, workforce AI training, and building the overall program.
How is this different from a general AI ethics course?
AI Compliance & Governance Essentials focuses on obligations and operating practices rather than ethical principles alone. It covers specific laws and frameworks, including the EU AI Act, US state laws, privacy law, and the NIST AI RMF, and it teaches the concrete artifacts compliance work produces: inventories, risk registers, test records, sign-offs, and incident logs.
Is the course content up to date?
The course states its regulatory facts as of August 2026, including the EU AI Act timeline after the 2026 Digital Omnibus amendments. Because deadlines and state laws change often, it anchors on durable principles such as risk-based thinking, transparency, documentation, and human accountability, and it teaches you to re-verify specifics against current sources before relying on them.
How long does the course take to complete?
The course has just under an hour of video across 16 lessons, plus a final exam. Lessons run about three to four minutes each and are organized into three modules: The AI Regulatory Landscape; The NIST AI Risk Management Framework; and Compliance in Daily Practice. Most learners can finish it in one or two sittings.
Is the course online and self-paced?
Yes. AI Compliance & Governance Essentials is 100% online and self-paced, and your access does not expire. You can start, pause, and resume at any time on a computer, tablet, or phone with a modern web browser. There is nothing to install, and no scheduled sessions to attend.
Is there a final exam?
Yes. The course ends with a 30-question multiple-choice final exam covering all three modules. You need a score of 80% or higher (24 of 30) to pass, and you can retake the exam as many times as you need. Finish all 16 lessons and pass the exam to complete the course and earn your certificate.
Do I get a certificate of completion?
Yes. After you complete all 16 lessons and pass the final exam, you can download a RiseCert certificate of completion from your account. It is a course completion certificate, not a license, a professional certification such as a legal or audit credential, or a continuing education certificate.
Does the course count for continuing education (CE or CPE) credit?
No. AI Compliance & Governance Essentials is not currently approved or accredited for continuing education credit, including CE, CPE, or CEU credit, by any state, bar, or licensing body. If you need credit hours for a license or professional designation, take a course approved by the body that issues it.
Can this training help meet the EU AI Act's AI literacy duty?
The course explains that the EU AI Act requires organizations using AI to ensure staff have AI literacy appropriate to their roles, and that completed training is the kind of evidence that duty asks for. Whether this course satisfies your organization's specific obligation is a decision for your compliance team or qualified counsel.
Is this course legal advice?
No. AI Compliance & Governance Essentials is educational and is not legal advice. It builds compliance literacy and teaches practices that reduce AI risk, but it cannot guarantee compliance. Laws change, so re-verify specifics, and consult qualified counsel about decisions, notifications, or obligations for your organization and jurisdiction.
How much does the course cost, and can I enroll my team?
AI Compliance & Governance Essentials costs $99 per learner as a one-time purchase, with no subscription or recurring fees. To enroll a team, department, or whole organization, for example as part of a workforce AI training program, contact RiseCert through the Contact Us page at risecert.org.
What is the refund policy?
All sales are final and no refunds are issued, as stated in the RiseCert Terms of Use. Please review the course description, the lesson list, and these FAQs before purchasing, and contact RiseCert through the Contact Us page at risecert.org with any questions first.