V77 Academy
← All courses

Level 1 · Foundation

V77 Certified AI Governance Foundation

A complete grounding in AI governance: how AI is built and where it fails, the EU AI Act's structure, roles, risk tiers and dates after the 2026 Digital Omnibus, what high-risk AI requires, GDPR, DORA and AI laws in the UK, US states and South Korea, ISO/IEC 42001 and the NIST AI RMF, and a first tour of V77.

What you'll be able to do

  • Explain how AI systems are built, bought and run, and why intended purpose drives risk.
  • Identify the main AI risks: unfairness, privacy, security, reliability and over-reliance.
  • Describe the building blocks of an AI governance programme.
  • Explain the AI Act's scope, key dates after the Omnibus, enforcement and penalties.
  • Assign value-chain roles and spot when a deployer becomes a provider.
  • Recognise prohibited AI practices.
  • Decide when a system is high-risk, including the Article 6(3) filter.
  • Apply transparency duties and the rules for general-purpose AI models.
  • List provider obligations for high-risk AI, from risk management to incident reporting.
  • List deployer obligations, including the FRIA and the right to an explanation.
  • Apply GDPR to AI: lawful basis, special categories, automated decisions, DPIAs and breaches.
  • Explain how DORA applies to AI in financial services.
  • Summarise AI rules in the UK, New York City, Colorado, Texas and South Korea.
  • Describe ISO/IEC 42001 and related standards.
  • Describe the NIST AI RMF functions and characteristics.
  • Use a control crosswalk to do the work once.
  • Find your way around the main parts of V77.

Modules

  1. 1. AI basics, risks and governance

    • How AI systems are built and run20 min
    • The main types of AI risk20 min
    • What AI governance is20 min

  2. 2. The EU AI Act: structure, roles and dates

    • Scope and key definitionsFree preview · 20 min
    • Roles: provider, deployer and others20 min
    • Dates, enforcement and penalties20 min

  3. 3. Risk tiers and prohibited uses

    • Prohibited AI practices (Article 5)20 min
    • When a system is high-risk25 min
    • Transparency duties, minimal risk and general-purpose AI20 min

  4. 4. What high-risk AI requires

    • Provider obligations25 min
    • Deployer obligations and the FRIA25 min
    • Human oversight, monitoring and incidents in practice20 min

  5. 5. GDPR, DORA and laws beyond the EU

    • GDPR and AI20 min
    • DORA and AI in financial services15 min
    • UK, US state and Korean AI laws20 min

  6. 6. Standards: ISO/IEC 42001 and NIST AI RMF

    • ISO/IEC 42001: the AI management system20 min
    • NIST AI Risk Management Framework15 min
    • Doing the work once: the control crosswalk15 min

  7. 7. A first tour of V77

    • Inventory and classification in V7715 min
    • Controls, evidence and testing15 min
    • Findings, incidents and proving it15 min