Srida IT Consulting & Services · Live Online · Expert Level
Certified AI Governance & Security Practitioner
The three AI references that matter — ISO/IEC 42001 · ISO/IEC 27090 · NIST AI RMF — to govern, manage the risk of, and secure AI. From requirement to audit.
Why these three, together
Three standards. One spine.
They are not competing frameworks — they stack. NIST gives you the risk method, ISO 42001 makes it a management system, and ISO 27090 secures the AI itself. Almost no programme teaches all three, and ISO 27090 is brand new (2026).
NIST AI RMF
The risk method
Govern · Map · Measure · Manage — how you manage AI risk, including the Generative AI profile.
ISO/IEC 42001
The management system
Build AI governance into how the organisation runs — an AI Management System (AIMS), clause by clause.
ISO/IEC 27090
The security layer
Defend AI against AI-specific threats — the new (2026) AI security guidance, threat-led.
Not theory — the practitioner spine
From requirement to corrective action
Every standard is taught along the same spine, so you can take any AI requirement and carry it all the way to a closed audit finding — and build the documents live.
The learning journey
22 sessions across the three standards
| Sessions | Focus |
|---|---|
| 1–2 | Foundations — the AI governance & security landscape; how the three standards stack |
| 3 | AI / ML / Generative AI concepts & the AI lifecycle for governance |
| 4–6 | NIST AI RMF — Govern · Map · Measure · Manage (+ GenAI profile), practical workshop |
| 7–8 | ISO/IEC 42001 — context, leadership & planning (clauses 4–6); AIMS scope & policy |
| 9–10 | ISO/IEC 42001 — support & operation (clauses 7–8); AI impact assessment |
| 11–12 | ISO/IEC 42001 — Annex A controls; AI system lifecycle & data governance |
| 13–14 | ISO/IEC 42001 — performance evaluation, internal audit & improvement (clauses 9–10) |
| 15–16 | ISO/IEC 27090 — the AI security threat landscape (poisoning, evasion, extraction, prompt injection) |
| 17–18 | ISO/IEC 27090 — security controls across the AI lifecycle |
| 19–20 | ISO/IEC 27090 — securing Generative AI & the AI supply chain; detection, monitoring, incident |
| 21 | Integrated — mapping all three onto one control spine; the evidence & audit pack |
| 22 | Capstone — govern + secure an AI use case end to end, and assessment |
~4.5 weeks · one hour each morning · Mon–Fri. (Session order may adjust for public holidays.)
Practical deliverables
You leave with a folder of working artifacts
Built during the sessions as adaptable templates — your own starter set for a real AI governance & security programme.
Govern (NIST AI RMF)
- AI governance framework
- AI risk assessment
- AI system inventory
- AI risk register
Manage (ISO 42001)
- AIMS scope & AI policy
- AI impact assessment
- Statement of Applicability (Annex A)
- Internal audit checklist, findings & CAP
Secure (ISO 27090)
- AI threat model
- AI security control set
- AI incident playbook
- AI supply-chain checks
Integrate
- One control-mapping matrix across all three
- Evidence pack
- End-to-end audit workpaper
- Capstone control pack
What’s included
Everything to learn, build and keep up
Live on Zoom
Interactive instructor-led sessions, every weekday morning.
Session recordings
Shared after each session — revisit anything, never miss out.
Detailed day-wise notes
Structured notes shared day by day to study and revise from.
Template pack
The govern / manage / secure artifacts, ready to adapt at work.
Hands-on builds
Requirement → control → evidence → audit, built live, not just explained.
Certificate of Achievement
Issued by Srida IT on completion and assessment (details below).
Who should join
For practitioners taking AI assurance seriously
- ✓AI governance leads & aspiring AI auditors
- ✓CISOs & security architects moving into AI
- ✓GRC, IT-risk & internal audit professionals
- ✓DPOs & privacy leads extending into AI
- ✓ML / AI engineering & product leads who need the control view
- ✓Consultants building an AI assurance practice
What you’ll be able to do
Outcomes by the end
- ✓Explain how NIST AI RMF, ISO 42001 and ISO 27090 fit together
- ✓Apply the NIST AI RMF (Govern · Map · Measure · Manage)
- ✓Implement an AI Management System (ISO 42001), clause by clause
- ✓Build an AIMS scope, AI policy and Statement of Applicability
- ✓Run an AI impact assessment
- ✓Threat-model AI systems using ISO 27090
- ✓Design AI security controls across the AI lifecycle
- ✓Secure Generative AI and the AI supply chain
- ✓Run an AI governance & security internal audit
- ✓Validate a population, test controls, and defend a finding
- ✓Map all three standards onto one control set
- ✓Produce an evidence pack an auditor accepts
Program certificate
Certified AI Governance & Security Practitioner
Participants who complete the program and meet the assessment requirements receive a Certificate of Achievement issued by Srida IT Consulting and Services Pvt. Ltd., covering practical capability across NIST AI RMF · ISO/IEC 42001 · ISO/IEC 27090.
per participant · all 22 live sessions, recordings, notes & template pack included
November 2026 batch · Mon–Fri · 7:00–8:00 AM IST · Live on Zoom
| Standards | ISO/IEC 42001 · ISO/IEC 27090 · NIST AI RMF |
| Level | Expert / practitioner |
| Schedule | Monday to Friday |
| Time | 7:00 AM – 8:00 AM (IST) |
| Duration | 22 sessions · ~4.5 weeks |
| Start | November 2026 batch |
| Mode | Live online on Zoom (recordings shared) |
| Trainer | Rajendra Bodda |
| Certificate | Certificate of Achievement — Srida IT Consulting and Services Pvt. Ltd. |
| Fee | ₹50,000 · ₹25,000 (50% off) |
| Conducted by | Srida IT Consulting and Services Pvt. Ltd. |
Program content is educational and does not constitute legal advice. ISO/IEC 42001 and ISO/IEC 27090 are referenced for teaching; confirm the current standard text and applicability for any real implementation. The 50% offer is for a limited period. Schedule may adjust for public holidays.