Plan the system
Define why the AI management system exists, plan the implementation, set the scope, and find the gaps.
AI Governance Build-and-Defend Studio
For cybersecurity and GRC professionals adding AI governance skills.
Taking on AI responsibilities without a clear way to manage them? In the AI Governance Build-and-Defend Studio, you design how a realistic fictional company governs its AI, get written feedback, and practice explaining your decisions to employers.

$497
Study plan and live office hours included.
Support period: live group office hours on the second and fourth Saturday of each month, and written feedback within three working days, during your first 90 days.
Learn it. Build and defend it. Use it professionally.
You apply the concepts to TechFlow Solutions, a fictional company. TechFlow is already trying one AI tool, has another use proposed, and has an AI feature built into software it uses. Your job is to plan its AI management system and explain your decisions.
Define why the AI management system exists, plan the implementation, set the scope, and find the gaps.
Write the AI policy and objectives, set up the AI risk assessment process, and plan the safeguards with a way to verify them.
Set the operating and change procedures, plan documentation, communication, and training, and prepare the system for review and certification readiness.
The nine-piece portfolio also covers organizing evidence and communicating findings so someone else can understand your work. The case is organized around ISO/IEC 42001 and the NIST AI Risk Management Framework. It also introduces how an organization’s ISO/IEC 42001 certification works and that an independent certification body makes that decision.
How it works
Watch short recorded lessons and review the case information, templates, and working materials. Every step includes an optional short podcast.
Complete the guided task, explain your key decisions, answer one defense question, and submit your portfolio work for written feedback.
Practice discussing the work in interviews, workplace conversations, or advisory discussions. At each step, choose a career activity or an advisory activity, and label the work as simulated practice for a fictional company.
Who it’s for
Cybersecurity and GRC professionals adding AI governance.
No coding is required. You should be ready to read, write, make decisions, and revise your work. Already know ISO/IEC 42001 at the Lead Implementer level? See the ISO/IEC 42001 Lead Implementer Portfolio.
Included in the Studio
Your instructor
Dr. Rose Shumba brings more than twenty years of cybersecurity education experience to the Studio.
She is a PECB Certified ISO/IEC 42001 Lead Implementer, the international standard for AI management systems, and a PECB Certified ISO/IEC 27001 Senior Lead Implementer. She is a former director of a National Security Agency and Department of Homeland Security Center of Academic Excellence in Cyber Defense.
She provides the written portfolio feedback and leads the group office hours.
Before you enroll
No. Step 1 introduces AI and the management system you will build, and every term is explained as it comes up. You need a computer, internet access, Microsoft Word or a compatible program, and a Google account.
Work at your own pace with six months of access. Written feedback arrives within three working days during your first 90 days, plus one follow-up review, with live group office hours on the second and fourth Saturday of each month and a WhatsApp group invitation after enrollment.
Nine simulated portfolio pieces for TechFlow Solutions, a fictional company. Present the work as simulated practice and explain what you personally completed.
Two monthly payments of $256 are charged one month apart, for a total of $512. Steps 1 through 5 open after your first payment, and Steps 6 through 9 plus the Finish module open after your second payment. Or choose six weekly payments of $87, for a total of $522; the next two weeks of content open after each successful payment.
No. The PECB training course, examination, application, and credential are separate from this Tech Academy program. The Tech Academy also offers PECB certification training as a separate program. Completion earns a Tech Academy Certificate of Achievement. It is not a PECB certification, is not issued or endorsed by NIST, ISO, or IEC, and does not certify your knowledge of the NIST AI Risk Management Framework or ISO/IEC 42001.
No. The Studio supports your professional development and helps you build simulated work samples. Employment and client outcomes are not guaranteed.
All sales are final because program access opens when you enroll.
AI Governance Build-and-Defend Studio
Develop nine simulated AI governance portfolio pieces with recorded lessons, written feedback, and group support.
$497
TechFlow Solutions is fictional, and portfolio work must be presented as simulated, case-based practice. This program excludes PECB training and examinations, does not guarantee employment or client engagements, and all sales are final.