This module shows you how to find out which AI tools an organisation actually uses and how to keep track of them. You will see why AI often arrives unnoticed, through free trials, vendor features and small automations, and how a simple intake process brings new uses into view before they start. You will build a ten-field AI system register with an intake form in Airtable, and learn how to route each request to fast-track, standard or committee review based on its data, the people it affects and the decisions it shapes.

This module shows you how to make sure every important AI governance decision has a clear owner. You will look at why shared responsibility for AI often means no one is accountable, and what each core role contributes: the governance committee, policy owner, system owner, privacy, security and legal. You will build a RACI chart in Google Sheets with a simple check that flags any activity without exactly one accountable role, and learn what a short committee charter needs to say about scope, membership, decision rights and how decisions are made.

This module shows you how to tell people clearly when AI is involved in what they see or experience. You will look at why hidden AI damages trust more than AI mistakes do, and at three situations that call for disclosure: talking to an AI, seeing AI-generated content, and receiving a decision shaped by AI. You will check an image for content credentials, review the main EU legal requirements, and practise writing short, plain-language notices. You will also build a simple form that lets people ask for a human review of an automated decision.

This module shows you how to keep an AI policy working after it has been approved. You will look at why AI policies fall out of date, and at two routines that keep them current: handling incidents when something goes wrong, and running regular compliance checks. You will learn how to rate an incident’s severity, set internal deadlines, and recognise when outside reporting deadlines, such as data protection breach rules, may apply. You will set up an incident board with an escalation checklist in Trello and plan a year of policy checks.