Model Online / On-Site
Duration
Modules 5 modules

Course Objective & Scope

Traditional enterprise risk management looks at harm to the company, whereas an AI System Impact Assessment examines potential harm to individuals, vulnerable groups and society. Both ISO/IEC 42001 (Clause 6.1.4 and Annex A.5) and the EU AI Act (Article 27 Fundamental Rights Impact Assessment / FRIA) mandate this assessment, and ISO/IEC 42005 provides the international standard for executing it.

This course covers threshold screening triggers, identifying directly and indirectly affected persons (AI subjects), scoring impact dimensions by severity, scale and reversibility, defining mitigations and linking with GDPR/KVKK DPIAs. Participants complete a full AI System Impact Assessment on a realistic enterprise use case.

Who Should Attend?

  • Governance, risk and compliance specialists implementing ISO/IEC 42001 or the EU AI Act
  • Legal counsel, Data Protection Officers (experienced with DPIAs) and ESG/human rights teams
  • Product and business owners of HR, lending, insurance, healthcare or customer-scoring AI
  • Responsible AI committee members and internal auditors

Key Takeaways

  • Apply the ISO/IEC 42005 lifecycle process and threshold triggers for AI impact assessments
  • Map affected stakeholders (AI subjects), indirect populations and vulnerable groups
  • Score potential harms across fundamental rights, safety, economic opportunity and well-being
  • Streamline workflows by combining GDPR/KVKK DPIAs with ISO 42005 and EU AI Act FRIAs
  • Author an auditable AI System Impact Assessment report with clear mitigation sign-offs

Curriculum

ISO/IEC 42005 Foundations: Enterprise Risk vs System Impact Assessment
  • Distinguishing risk to the organisation from impact on individuals, groups and society
  • How ISO/IEC 42005 operationalises ISO/IEC 42001 Clause 6.1.4/Annex A.5 and EU AI Act Article 27 (FRIA)
  • Initial screening thresholds and lifecycle triggers requiring re-assessment
Scoping Context and Mapping Affected Stakeholders (AI Subjects)
  • Separating the system operator from the affected person (applicant, borrower, employee, citizen)
  • Identifying vulnerable populations and indirectly affected groups
  • Accounting for both intended use and reasonably foreseeable misuse
Impact Dimensions and Severity / Reversibility Scoring
  • Fundamental rights, fairness, physical safety, economic opportunity, psychological well-being and environment
  • Evaluating harms across severity, scale/reach, likelihood and reversibility
Mitigation Design, Stakeholder Consultation and DPIA Integration
  • Translating identified harms into design changes, human oversight and redress mechanisms
  • Unifying GDPR/KVKK DPIAs with ISO 42005 and FRIA templates to avoid duplicate effort
  • Residual impact sign-off, record retention and external disclosure considerations
Workshop: Completing an AI System Impact Assessment Report
  • Running a full impact assessment on a high-impact hiring, lending or customer-triage scenario
  • Presenting the completed Impact Assessment report and mitigation plan for sign-off

Other Courses in This Category

  • Governing Generative AI Risks with NIST AI RMF and NIST AI 600-1

    Apply the NIST AI 600-1 Generative AI Profile on top of the NIST AI RMF to govern the 12 core generative AI risks—including confabulation, data privacy, IP, cyberattacks and value-chain dependencies.

    Responsible AI & AI Governance Corporate
    Live Course
    5 modules
    View
  • Shadow AI Discovery, SaaS AI Controls and Safe Enablement

    Discover and govern Shadow AI—unapproved web LLMs, browser extensions and silently enabled AI features inside existing SaaS tools—using CASB/DLP controls, SaaS opt-out reviews and safe internal alternatives.

    Responsible AI & AI Governance Corporate
    Live Course
    5 modules
    View
  • Responsible AI Principles and Operational Practice

    Translate fairness, transparency, accountability, privacy, safety and human agency from abstract commitments into practical checklists across AI design, procurement and daily business operations.

    Responsible AI & AI Governance Corporate
    Live Course
    5 modules
    View
  • AI Ethics, Safety and Security Risk Awareness for Leaders

    Understand ethical harms such as manipulation and deepfakes alongside AI safety and security threats—prompt injection, jailbreaks, data poisoning and OWASP LLM Top 10—and govern guardrails and red teaming.

    Responsible AI & AI Governance Corporate
    Live Course
    5 modules
    View
  • Enterprise AI Governance Framework and Operating Mechanisms

    Build an enterprise AI governance framework that scales innovation safely: establish an AI system inventory, run risk-proportionate stage-gates across the lifecycle, and report risk and value to the board.

    Responsible AI & AI Governance Corporate
    Live Course
    5 modules
    View
  • Drafting and Implementing Corporate AI Policies

    Draft clear, enforceable corporate AI policies covering employee Generative AI Acceptable Use, data classification rules for prompts, AI procurement and development standards, and rollout communication.

    Responsible AI & AI Governance Corporate
    Live Course
    5 modules
    View

Get in touch