AI Governance and Security

AI Governance and Security from the Enterprise Technology Association (ETA) is for the leaders who have to let people use AI and agents safely: CIOs, CISOs, IT managers, security, risk and compliance owners, and operations leaders at small to mid-size organizations and public bodies. It works at the level of your whole organization: the roles, rules and routines that make AI use visible, proportionate and accountable.

You build a practical program step by step: accountability and an AI use policy people follow, an AI inventory that finds shadow AI, low, medium and high risk tiers, use-case risk assessment, data rules and vendor review, security controls for assistants and agents, monitoring, audits and an AI incident playbook, and a one-page report for your board. You finish with a capstone: an AI governance and security plan for your organization, submitted and reviewed by a person. Completing the course earns the ETA Specialist: AI Governance and Security credential.

What you'll learn

• Set up roles, accountability and an AI use policy that staff can follow
• Build an AI inventory that includes embedded AI features, connectors, agents and shadow AI
• Rate AI uses as low, medium or high risk and set the controls each tier requires
• Run use-case risk assessments, data-to-tool rules and AI vendor due diligence
• Secure assistants and agents with their own identities, least privilege and connector controls
• Contain prompt injection and excessive agency, and fix oversharing before assistant rollouts
• Use the ETA Agent Autonomy Ladder as an approval control for every agent
• Monitor, audit and respond to AI incidents, and report AI risk and value to leaders
• Map your program to recognized frameworks, using a dated rules and tools snapshot reviewed every quarter

Who it's for

IT, security, risk, compliance and operations leaders in any sector who are responsible for how their organization adopts AI and agents. It assumes you have completed Level 1: Foundations of the ETA Certified AI Empowered Professional, or have equivalent experience, and reuses its vocabulary: ADAPT, the six-part brief and the ETA Agent Autonomy Ladder. Threat modeling and incident response for a single agent workflow are covered in AI Agents at Work: Advanced; this course works at the program level.

Format

Four modules (about 4.5 hours in total), each with workplace examples from a range of sectors, templates you can copy, and a hands-on exercise in your organization's approved AI tool (with a no-tool option). Each module ends with a knowledge check. The course ends with a capstone and a final assessment that includes your capstone summary, graded by an ETA reviewer. This course is general information, not legal advice.