Responsible AI with the NIST AI Risk Management Framework

Apply the NIST AI Risk Management Framework to real generative AI systems. Risk-management foundations and AI-specific extensions cover risk, risk-management frameworks, the...

Read More
By Request
8781  Reviews star_rate star_rate star_rate star_rate star_half
$2,000USD
Duration 2 days
Course Code GAI-3001
Available Formats Classroom

Overview

Course Description

Apply the NIST AI Risk Management Framework to real generative AI systems. Risk-management foundations and AI-specific extensions cover risk, risk-management frameworks, the Frame/Assess/Respond/Monitor cycle, the Prepare/Categorize/Select/Implement/Assess/Authorize/Monitor process, how AI risk differs from traditional software risk, the challenges of AI risk management, and the AI RMF core functions. Trustworthy AI covers safety, security, resiliency, explainability, interpretability, fairness, accountability, transparency, validity, and reliability. Governing, managing, mapping, and measuring AI risks cover policies and processes, accountability structures, contingency plans, AI risk prioritization, the mitigate/transfer/accept/avoid/insure responses, supply-chain and incident-response considerations, AI in context, categorization, oversight scoping, TEVV processes, and production monitoring. Unique and increased GenAI risks cover hallucinations, dangerous output, environmental impact, IP issues, toxicity, bias, homogenization, and supply chain. Hands-on labs produce a trustworthy-AI assessment, a basic governance policy, a risk-prioritization rubric, and a generative-AI risk inventory. The course is designed for risk-management practitioners in AI-deploying organizations.

Skills Gained

By the end of this course, participants will be able to:

  • Identify potential harms posed by AI systems
  • Address challenges in AI risk management at organizational scale
  • Apply the NIST AI Risk Management Framework to real projects
  • Apply mitigate, transfer, avoid, accept, and insure responses to AI risks
  • Establish AI governance structures that enhance stakeholder trust

Who Can Benefit

This course is designed for:

  • Anyone interested in AI risk management

Prerequisites

Participants should enter this course with:

  • GAI-2101 or equivalent

Organizational Objectives

This course assists organizations to:

  • Lower AI-related risk through systematic application of the NIST AI RMF
  • Establish auditable governance structures that satisfy emerging regulatory requirements
  • Build a working AI-risk vocabulary across risk-management and engineering teams
  • Reduce time-to-mitigation through trained risk-prioritization and response selection

Software

All attendees must have a modern web browser and an Internet connection.

Read Less

Course Details

Course Details

Introduction to Risk Management & the NIST Risk Management Framework

By the end of this module, you will be able to define risk, risk management, and the NIST RMF; walk the Frame/Assess/Respond/Monitor cycle; apply the Prepare/Categorize/Select/Implement/Assess/Authorize/Monitor process; and recognize the legacy of the framework.

  • What is Risk, Risk Management, and a Risk Management Framework?
  • Frame, Assess, Respond, and Monitor
  • Prepare, Categorize, Select & Implement
  • Assess, Authorize, and Monitor
  • Legacy of the NIST RMF
  • Hands-on Lab: Walk through how the NIST RMF works on a Risky Business case study end-to-end.

Understanding AI Risks and the NIST AI Risk Management Framework

By the end of this module, you will be able to define AI risk, distinguish it from traditional software risk, recognize the challenges of AI risk management, walk the NIST AI RMF, and apply its core functions.

  • What is AI Risk?
  • How AI Risk Differs from Traditional Software Risk
  • Challenges in AI Risk Management
  • The NIST AI Risk Management Framework
  • Understanding the NIST AI RMF Core Functions
  • Hands-on Lab: Compare AI versus software risks and plan personnel and resources for an AI risk management program.

Understanding Trustworthy AI

By the end of this module, you will be able to characterize AI safety, security, and resiliency, apply explainability and interpretability principles, ensure fairness, build accountability and transparency, and recognize valid and reliable AI behaviour.

  • What makes AI Safe, Secure, and Resilient?
  • The Importance of Explainability & Interpretability
  • Ensuring Fairness in AI
  • Accountability & Transparency in AI
  • Valid & Reliable AI
  • Hands-on Lab: Author a trustworthy response to a real AI risk and balance the trustworthy-AI attributes against each other.

Governing and Managing AI Risks

By the end of this module, you will be able to author AI governance policies and accountability structures, choose between mitigate/transfer/accept/avoid/insure responses, plan supply-chain and incident response, and resource risk sustainably.

  • Policies, processes, procedures, and practices
  • Accountability structures, diverse input, and culture
  • Engagement plans, contingency plans, and AI risk prioritization
  • Mitigate, Transfer, Accept, Avoid, Insure
  • Resourcing risk, sustaining value, and emergency stops
  • Supply-chain risks, sunset clauses, and incident response
  • Hands-on Lab: Author a basic AI governance policy and choose a risk-mitigation approach for one realistic scenario.

Mapping and Measuring AI Risks

By the end of this module, you will be able to map AI in context across application/actors/aspirations, categorize AI systems, scope oversight and operator training, measure AI risks through testing and metrics, and avoid perverse incentives in TEVV.

  • AI in Context: Application, Actors, Aspirations
  • Categorization of AI
  • AI Limitations and Oversight, Scoping, and Operator Training
  • Measuring AI Risks - Testing, limits, metrics, and thresholds
  • Evaluating TEVV processes and avoiding perverse incentives
  • Production monitoring and safety statistics
  • Hands-on Lab: Find risks in sample applications and design a risk report for the most concerning ones.

Unique and Increased Risks of Generative AI

By the end of this module, you will be able to recognize the risks unique to or amplified by generative AI — hallucinations, data privacy, environmental impact, cybersecurity, IP issues, abusive content, bias, homogenization, and supply chain.

  • Hallucinations, Dangerous Output, and Data Privacy
  • Environmental Impact, Human-AI Configuration, and Information Integrity
  • Cybersecurity, Intellectual Property, and Controlled Information
  • Abusive Content and Toxicity, Bias, and Homogenization
  • Supply Chain Risks
  • Hands-on Lab: Identify generative-AI risks in a sample system and choose between mitigate, transfer, accept, and avoid.

Schedule

Upcoming Course Dates

There are currently no scheduled dates for this course. If you are interested in this course, contact us with the form below.

Contact Information

FAQ

Does the course schedule include a Lunchbreak?

Classes typically include a 1-hour lunch break around midday. However, the exact break times and duration can vary depending on the specific class. Your instructor will provide detailed information at the start of the course.

What languages are used to deliver training?

Most courses are conducted in English, unless otherwise specified. Some courses will have the word "FRENCH" marked in red beside the scheduled date(s) indicating the language of instruction.

What does GTR stand for?

GTR stands for Guaranteed to Run; if you see a course with this status, it means this event is confirmed to run. View our GTR page to see our full list of Guaranteed to Run courses.

Does Ascendient Learning deliver group training?

Yes, we provide training for groups, individuals and private on sites. View our group training page for more information.

What does vendor-authorized training mean?

As a vendor-authorized training partner, we offer a curriculum that our partners have vetted. We use the same course materials and facilitate the same labs as our vendor-delivered training. These courses are considered the gold standard and, as such, are priced accordingly.

Is the training too basic, or will you go deep into technology?

It depends on your requirements, your role in your company, and your depth of knowledge. The good news about many of our learning paths, you can start from the fundamentals to highly specialized training.

How up-to-date are your courses and support materials?

We continuously work with our vendors to evaluate and refresh course material to reflect the latest training courses and best practices.

Are your instructors seasoned trainers who have deep knowledge of the training topic?

Ascendient Learning instructors have an average of 27 years of practical IT experience and have also served as consultants for an average of 15 years. To stay current, instructors spend at least 25 percent of their time learning new, emerging technologies and courses.

Do you provide hands-on training and exercises in an actual lab environment?

Lab access is dependent on the vendor and the type of training you sign up for. However, many of our top vendors will provide lab access to students to test and practice. The course description will specify lab access.

Will you customize the training for our company’s specific needs and goals?

We will work with you to identify training needs and areas of growth.  We offer a variety of training methods, such as private group training, on-site of your choice, and virtually. We provide courses and certifications that are aligned with your business goals.

How do I get started with certification?

Getting started on a certification pathway depends on your goals and the vendor you choose to get certified in. Many vendors offer entry-level IT certification to advanced IT certification that can boost your career. To get access to certification vouchers and discounts, please contact info@ascendientlearning.com.

Will I get access to content after I complete a course?

You will get access to the PDF of course books and guides, but access to the recording and slides will depend on the vendor and type of training you receive.

How do I request a W9 for Ascendient Learning?

View our filing status and how to request a W9.

Reviews

Easy to work with. Learning material pdfs were able to be printed out in color which was very nice to write on.

They are very good and made sure we had all the appropriate materials for class.

The exit certified aws course provided a good introduction to the tools available on aws.

Instructor knew her stuff. Long time in the industry. Course was easy to follow and very informative.

The instructor really took his time and made sure I was able to understand the concepts.