42001 Foundation Portfolio

Build your first AI governance portfolio pieces, and explain them with confidence.

For recent graduates, career changers, and professionals starting out in AI governance who want to help organizations use AI responsibly with an AI management system (AIMS). You need a basic understanding of governance, risk management, and compliance (GRC) or AI governance; previous work experience and certifications are optional. No coding needed.

Build five simulated AI governance portfolio pieces for a fictional company, with written feedback from Dr. Rose Shumba on every step.

Learn it. Build and defend it. Use it professionally.

USD $287

Self-paced portfolio project · Written feedback · Group office hours

Enroll in the Portfolio
Colleagues discussing their work around a laptop42001 Foundation Portfolio

You've learned the basics. Now you want to use them.

You may have studied GRC or AI governance through coursework, training, or independent study. You've learned why AI risks matter and what an organization does to govern the AI it uses. Now you want to see how that knowledge turns into real work.

How do I show an employer what I learned about AI governance?

What would you show when someone asks what you can do?

An interviewer asks, "Walk me through an AI policy you drafted. What did you include, and why?"

A manager asks you to list the company's AI tools and the risks that come with them. Where would you start?

You know the terms. A piece of work you've completed yourself gives you something concrete to discuss: what you did, the decision you made, and why.

Build the work. Practice explaining your decisions.

Training gives you the language of AI governance and ISO/IEC 42001. Applying it to a realistic case shows you how the pieces fit together.

Why does this company need an AIMS now? What should the AI policy commit to? Which AI risk needs attention first?

In this program, you answer questions like these as you build. You document your reasoning, receive feedback, and practice explaining your work.

Help TechFlow start its AIMS, one piece at a time.

Your assignment is to help TechFlow Solutions, a fictional company, take the first steps toward governing FlowAssist, its AI customer support tool.

In four guided steps, you write an AIMS purpose brief, an AI policy with objectives, an AIMS scope and AI system profile, and an AI risk register. In the fifth step, you connect that work to a second framework: you match each piece to the NIST AI Risk Management Framework and assess TechFlow against one selected outcome.

Each step gives you a task, a section of the portfolio template and a worked example. For each step, you submit two things:

  • The written piece, with a short written rationale for your key decision.
  • A short video, recorded using your phone or computer, answering one interview question about that piece.

You finish by selecting your best three pieces and sharing them through one portfolio link. Each piece is clearly labeled as simulated work, ready for interviews.

Learn it. Build and defend it. Use it professionally.

01

Learn It.

Bring your basic understanding of GRC or AI governance, from coursework, training from any provider, or independent study. If ISO/IEC 42001 is new to you, allow additional time to learn its concepts as you build.

02

Build and Defend It.

Apply your knowledge to TechFlow. Complete each guided task, write the rationale for your decisions, and submit your work for written feedback from Dr. Rose Shumba.

03

Use It Professionally.

Record a short answer for each step, and practice discussing your work in interviews and at work. Share your strongest three pieces through one portfolio link.

Is this portfolio for you?

This program is for:

  • Recent graduates and career changers with a basic understanding of GRC or AI governance.
  • People moving into AI governance who want their first portfolio pieces.
  • Professionals who want to see how ISO/IEC 42001 works in practice.
  • People taking or completing ISO/IEC 42001 Foundation training through any provider.

Previous work experience, certifications, PECB training and experience with AI tools are optional. You need a basic understanding of governance, risk management, and compliance (GRC) or AI governance, and a willingness to read, write, make decisions and revise your work. Existing knowledge of ISO/IEC 42001 helps; if it is new to you, allow additional study time.

Guided tasks, templates, and feedback on every step.

Your portfolio materials

  • The TechFlow case file.
  • Five guided tasks in one portfolio template, with worked examples.
  • A word list, and optional knowledge-check questions on ISO/IEC 42001 Foundation topics.
  • A showcase format for sharing your best three pieces through one link.

Your mentor support

  • One written review from Dr. Rose Shumba for each of the five steps, returned within three working days.
  • Live group office hours every two weeks, where you can ask questions and discuss your work.

Your 90 days of mentor support begin when you enroll. You keep access to the program materials for 6 months.

Get feedback from Dr. Rose Shumba.

Dr. Rose Shumba brings more than twenty years of cybersecurity education experience. She is a PECB Certified ISO/IEC 42001 Lead Implementer and a PECB Certified ISO/IEC 27001 Senior Lead Implementer, and a former director of a National Security Agency and Department of Homeland Security Center of Academic Excellence in Cyber Defense.

She writes the feedback on your portfolio steps and leads the group office hours, helping you examine your decisions and explain your work more clearly.

Frequently asked questions

Who can join?

This program is for recent graduates, career changers, and professionals who have a basic understanding of governance, risk management, and compliance (GRC) or AI governance and want practical work samples they can show and explain.

You do not need previous work experience or a particular certification. You should have a basic understanding of governance, risk management, and compliance (GRC) or AI governance through coursework, training, or independent study. If ISO/IEC 42001 is new to you, allow additional time to learn the relevant concepts as you complete your project.

I'm new to ISO/IEC 42001. Can I still take part?

Yes, if you have a basic understanding of governance, risk management, and compliance (GRC) or AI governance. You'll work through a fictional company case using guided tasks, templates, and feedback. Allow additional time to learn the ISO/IEC 42001 concepts as you complete the project.

This is a practical portfolio program. It does not include a full certification training course.

Do I need PECB training to join?

You can join without PECB training. You need a basic understanding of governance, risk management, and compliance (GRC) or AI governance, from coursework, training from any provider, or independent study. The project follows ISO/IEC 42001, so plan to use ISO/IEC 42001 learning resources as you complete the tasks.

Do I need to know how to code?

No. The work is reading, writing and making decisions about how a company uses AI.

When should I build my portfolio?

You can build it on its own, alongside a training course, or after one.

Does this program include teaching lessons?

This program is a self-paced portfolio project, focused on applying your learning. Each step includes a short explanation of the terms its tasks use, and the word list defines the rest. If you want recorded teaching lessons and guided portfolio work together, explore the AI Governance Build-and-Defend Studio.

How long does it take?

About four to six hours for the five steps, plus time for your short videos and revisions.

What will I build?

An AIMS purpose brief, an AI policy with objectives, an AIMS scope and AI system profile, an AI risk register, and a short map of your work to the NIST AI RMF with one assessed outcome.

Is this real client work?

TechFlow Solutions is fictional, and the project is simulated practice. When you share your portfolio, identify it as a simulation and explain what you personally completed.

How does the feedback work?

During your 90 days, you submit each step's written piece and video together for one written review from Dr. Rose Shumba, returned within three working days. You use the feedback to revise your work on your own. Group office hours every two weeks are the place to ask about your revisions.

Does this include PECB training or certification?

This is a Tech Academy portfolio program. PECB training, examinations, certification applications and credentials are separate. The Tech Academy also offers PECB certification training for learners who want that pathway.

Does the portfolio guarantee a job?

It gives you simulated work samples and practice explaining your approach. Employment outcomes depend on factors beyond this program.

What is the refund policy?

All our programs are digital. Once access to the program has been provided, the purchase is non-refundable. Please review the program description and what is included before enrolling.

Build work you can show and explain.

Build five simulated AI governance portfolio pieces, receive written feedback from Dr. Rose Shumba, and practice explaining the decisions behind your work.

USD $287

Self-paced portfolio project · 90 days of mentor support · Group office hours every two weeks

Enroll in the Portfolio

This is a simulated portfolio project. Certification training and examinations are purchased separately.