Teach on Udemy

Turn what you know into an opportunity and reach millions around the world.

Learn More

Your cart is empty.

Keep shopping

AI Governance Frameworks: NIST, ISO 42001, EU AI Act & OECD

Name: AI Governance Frameworks: NIST, ISO 42001, EU AI Act & OECD
Rating: 5.0 (2 reviews)

Implement the right framework combination at your organizatation— templates, examples and the NovaCred case study

Created bySrinivas Bommena

Last updated 5/2026

English

What you'll learn

Understand the four major AI governance frameworks — NIST AI RMF, ISO 42001, EU AI Act and OECD AI Principles — and what each one actually demands operationally
Select the right framework combination for your organisation based on regulatory context, maturity level, audience and business goals
Sequence your implementation across four phases — from values foundation through to legal compliance and external certification
Apply the NIST AI RMF four functions — GOVERN, MAP, MEASURE and MANAGE — to real AI systems using a structured risk register
Conduct an ISO 42001 gap analysis, score all 16 clauses and build a prioritised remediation roadmap toward certification
Classify AI systems under the EU AI Act risk tiers and identify all High-Risk obligations including human oversight, technical documentation and conformity asse
Operationalise the OECD AI Principles beyond a policy statement and reach Level 2 adoption with a functioning AI ethics review process
Use downloadable templates and the NovaCred FinTech case study to apply every framework to a real-world scenario immediately

Course content

7 sections • 81 lectures • 4h 25m total length

Introduction - Course Preamble4:14
Why 4 Frameworks Exist6:01
Layered Architecture & A Case Study3:09
How to Use this Course1:45
How to Use AI_Governance_Field_Guide during the Course4:52

What is NIST Framework & What IT is NOT3:44
Explaining of The Four Core Functions - Govern,Map,Measure & Manage2:06
Walking the Four Functions In Practice - A Program Mindset1:27
Walking the Four Functions In Practice - Govern,Map,Measure and Manage5:05
The Four Functions - The Real Bottleneck Is Not Technical1:00
How to Prepare AI System Inventory3:58
Case Study: NovaCred CreditIQ v3.2 Assessment - Applying GOVERN Function3:05
Case Study: NovaCred CreditIQ v3.2 Assessment - Applying MAP Function1:55
Case Study: NovaCred CreditIQ v3.2 Assessment - Applying MEASURE Function1:53
Case Study: NovaCred CreditIQ v3.2 Assessment - Applying MANAGE Function2:34
NIST in Financial Services Context1:20
NIST in FS Context - How Financial Services Changes the NIST Picture2:18
NIST in FS Context - The Retrospective Governance Scenario1:57
NIST in FS Context - Practical Sequencing for Financial Services1:26
Exercise Briefing - AI Risk Register Starter2:04
Exercise Briefing - Your Scenario: VeriLend AutoSettle5:30
Explanation of AI Risk Register of NovaCred FinTech (Completed Example)4:33
How to generate Mandatory Documents of NIST AI RMF using Claude5:28
Recap of Module 1 & Up Next Module 21:04

ISO 42001 Introduction - The AI Management System Standard2:38
ISO 42001 vs ISO 27001 & Why ISO 42001 Certifiability Changes Everything3:59
ISO 42001 & 27001 Same Architecture & How NovaCred used 42001 as a Sales Asset4:58
What Auditors Actually Look For & Clause 1 -10 & Details of Clauses 4-75:27
Details of Clause 8-10 & The Most Important Distinction in ISO 42001 Auditing5:14
Implementation Stage - Thress Stages & Two Things Nobody Tells You4:22
NovaCred Case Study - Gap Analysis , Implementation & OutCome4:33
NovaCred Case - AI System Impact Assessment Sheet7:22
Three Practitioner Lessons from NovaCred's ISO 42001 Journey1:45
ISO 42001 Gap Analysis Exercise Overview1:58
Exercise ISO 42001 Gap Analysis Lite3:04
Module 2 Complete & Up Next Module 31:44

Importance of EU AI Act2:13
Important update on 7th May 2026 to EU AI Act4:04
What the EU AI Act Is — and Why It Changes Everything4:03
The EU AI Act's Four-Tier Risk Classification & It's Enforcement Timeline5:18
High-Risk Obligations - 1–6 Foundation Requirements4:36
High-Risk Obligations 7–12 Assurance & Lifecycle4:30
The EU AI Act Did Not Create Your Timeline2:01
The Important Distinction in Compliance & Five Hallmarks of Good Compliance6:15
NovaCred — From Documentation Project to Real Compliance2:04
How NIST, ISO 42001, and the EU AI Act Layer Together2:11
Risk Classification Drill Overview2:31
Exercise - Risk Classification Drill3:11
Module 3 Complete - Up Next Module 41:33

Understanding Importance of OECD AI Principles1:34
What is OECD AI & What the OECD AI Principles Are — and Why They Matter4:40
The Five OECD AI Principles2:58
The NovaCred OECD Moment — When Principles Unlocked a Stalled Deal1:41
The Three Levels of OECD Adoption4:08
The Four Level 2 Tests — All Four Must Be True2:16
Using OECD Principles Strategically6:13
OECD Principles Applied - NovaCred CreditIQ v3.24:48
NovaCred - Month 0 vs Month 6 OECD Scores & Three Practitioner Lessons3:05
AI Ethics Policy Audit Overview1:49
Exercise - AI Ethics Policy Audit4:43
End of Module 4 & Up Next Module 51:46

How Everything Integrates Together1:11
Four Instruments — Four Fundamentally Different Purposes4:23
The Layered Architecture — Each Layer Does a Job the Others Cannot1:48
The Four Decision Dimensions & Decision Dimensions 1 & 23:55
The Four Decision Dimensions & Decision Dimensions 3 & 43:00
The NovaCred Case Study - The Trigger and the Response2:24
The NovaCred Case Study - The Four-Framework Response & The Commercial Outcome4:03
The Practical Four-Phase Sequencing Strategy4:07
Five Anti-Patterns in AI Governance Programmes4:43
97 Documents Covering 4 Frameworks7:45
Exercise - Framework Stack Decision — Four Scenarios3:56
Navigating AI Governance Frameworks — Complete2:04

Requirements

No prior knowledge of AI governance frameworks is required — the course builds from the ground up
A basic familiarity with how organisations manage risk, compliance or regulatory obligations will help but is not mandatory
No technical or engineering background needed — this course is designed for governance, risk and compliance professionals, not data scientists or developers

Description

Recent Updates to the course :

1. Importan updates to EU AI Act modifications done on 7th May is updated in EU AI Act Module

2. How to create mandatory documents using Claude with required documents and prompt detail is updated in Module 1

3. Coming up : What information needs to be gathered during discover calls for ISO 42001 certification

AI Governance Frameworks: NIST AI RMF, ISO 42001, EU AI Act, OECD AI Principles

The problem every AI governance professional faces right now

Four frameworks. Four acronyms. One very confused boardroom.

NIST AI RMF. ISO 42001. EU AI Act. OECD AI Principles. If you have sat in an AI governance meeting recently, you have heard these names thrown around — often by people who have not read any of them in full.

The honest answer to "which framework should we use?" is: it depends. And nobody is teaching you exactly what it depends on.

This course does.

What makes this course different

Most AI governance courses explain what the frameworks say. This course teaches you what to do with them.

You will learn how to select the right framework combination for your organisation's specific context, how to sequence them across four implementation phases, and how to build AI governance that holds up — not just on paper, but under regulatory scrutiny and client due diligence.

Every module includes downloadable templates you can use immediately — an AI risk register, a gap analysis scoring sheet, an EU AI Act obligations checklist, an ethics policy mapping template, and a full sequencing roadmap.

And every template comes with a completed worked example. Not a blank page. A real example showing you exactly how to think through each framework applied to a real AI system.

The NovaCred case study

The course follows NovaCred — a Singapore-headquartered FinTech that discovered mid-deal that their credit scoring engine qualified as High-Risk under the EU AI Act. No conformity assessment. No technical documentation. No human oversight mechanism. German bank deal at risk.

Watch how NovaCred applied all four frameworks in sequence — OECD Principles as their values foundation, NIST AI RMF to build their risk register, ISO 42001 to achieve certification in 11 months, and EU AI Act to close all 12 High-Risk obligations. The deal closed. The certificate became a sales asset in every subsequent enterprise pitch.

Their story runs through every module. It is the most practical thing in the course.

The content is practitioner-first. Not academic. Not theoretical. Built from real engagements with real organisations facing real regulatory pressure.

This course is right for you if

You are in risk, compliance, legal, audit or AI practice and AI governance is landing on your desk. More importantly, this is useful for AI Technical Leads and Archiects to make sure that they builit the systems in compliance with these frameworks. Ofcourse, Project Manager and Program Managers who are managing the projects needs to steer overall solution towards AI Governance Compliance and hence they very well needs to understand these frameworks.

At the end of the day, you need to understand the frameworks and apply them confidently, and build governance that actually works in your respective organizations.

Why this matters now

The organisations building genuine governance capability today will face significantly lower costs and significantly stronger market positions when regulatory pressure peaks.

The time to start is now.

Who this course is for:

Risk and compliance professionals who are being asked to take on AI governance responsibilities and need a structured, practitioner-level understanding of the major frameworks
AI practitioners, product managers and technology leaders who need to understand what governance frameworks their organisation must comply with and how to implement them
Legal, audit and regulatory professionals navigating the EU AI Act, ISO 42001 or NIST AI RMF on behalf of clients or their own organisations
Consultants and advisers in financial services, healthcare or enterprise technology who need to speak the language of AI governance credibly in client engagements
Anyone preparing for AI governance certifications such as the IAPP AIGP or ISO 42001 Lead Implementer who wants practitioner-level framework fluency before sitting the exam

AI Governance Frameworks: NIST, ISO 42001, EU AI Act & OECD

What you'll learn

Explore related topics

Course content

Module 0: Introduction - Navigating AI Governance Frameworks5 lectures • 20min

Module 1 : NIST AI Risk Management Framework19 lectures • 52min

Module 2: ISO/IEC 42001:2023 - The AI Management System Standard12 lectures • 47min

Module 3: EU AI Act - Binding Law, Not Guidance13 lectures • 45min

OECD AI Principles - The Philosophical Foundation of AI Governance12 lectures • 40min

Module 5 - Framework Comparison, Selection & Sequencing12 lectures • 43min

Module 6 - Summary & Next Steps - Bringing the Architecture Together8 lectures • 18min

Requirements

Description

Who this course is for: