Assessing AI Risks & Controls

Course Description

Delivery Method: QAS Self Study
           

Artificial Intelligence (AI) is fast, complex, and virtually limitless. AI is in the news almost every day highlighting major benefits and corresponding significant risks. 

Who will assess the security and controls as this innovative technology interfaces with your enterprise? Unfortunately, this is not easily achieved in AI environments.

We will NOT be addressing the risk of AI destroying humanity. Instead, we will be focused on the risks & controls pertaining to your enterprise developing AI applications or using AI third-party services. The controls discussed are relevant to all AI applications whether developed in-house or using a third-party AI application.

This course provides the opportunity for audit and risk management to move upfront and influence AI security and controls as the technology evolves.

The intended audiences for this course are all auditors (IT Auditors, Business Auditors, Internal and External Auditors), Audit Management and Risk Management who have the responsibility to provide assessments of enterprise risk.

Course Objectives:

• Recognize foundational AI concepts, key risks and associated controls.
• Evaluate controls necessary to protect the integrity of your enterprise’s AI application data.
• Assess risks & controls pertaining to your enterprise developing and using AI.
• Identify controls specific to AI Data Governance, AI monitoring and human oversight.
• Define an audit strategy to assess Third Party AI security and controls.
  
  

Agenda:

IT Risk & AI Technology

• Risk & Risk Management
• Defining AI
• Machine Learning
• Robotic Process Automation (RPA)
  
  

AI Risks & Security Resources

• Inaccurate Results & Decisions
• Bias & Discrimination
• Health & Safety
• Regulatory Non-Compliance
• And More …
  
  

AI Governance

• AI Accountability & Ownership
• AI Oversight & Monitoring
• AI Liability Considerations
  
  

AI Access Management

AI Application Integrity

• “Training” the AI Application
• Change, Patch, Configuration Management
• System Development of AI Applications
  
  

AI Human Interface

• Access Management
• Privileged Access
• Data Governance

Middleware, API, & Assessing Third Party Controls

• Cloud Configuration
• Right to Audit
• SOC Reports
  
  

AI Audit Strategy

ChatGPT AI Demonstrations

Additional Information:

Program Level: Basic

• No Prerequisite knowledge is required for successful completion of the course.
• No advance preparation is required for successful completion of the course.
  

Policies:

Refund: ERP Risk Advisors provides refunds in accordance with the refund policy of Teachable, our learning platform host. Refunds must go through the support funnel found at https://support.teachable.com/hc/en-us/articles/360004215372-Request-a-Refund. Teachable’s terms of use, including the refund policy, can be found at: https://teachable.com/terms-of-use. a) In general, all participants purchasing programs that are a part of ERP Armor: Learning are entitled to a thirty (30) day full refund from the date of purchase. Unless authorized by Teachable in Teachable's sole discretion, ERP Risk Advisors will not offer to Participants a refund policy for a period of more than thirty (30) days. b) Teachable reserves the right to refuse refunds to participants who abuse this Refund Policy. Examples of abuse include, but are not limited to, requesting refunds for multiple schools or requesting refunds in consecutive months. c) Regardless of any other section to the contrary in these Terms, Teachable does not establish, maintain, or control refunds or a refund policy for any ERP Armor: Learning Content that was processed through a Custom Payment Gateway, including programs.

Cancellation: If a participant cancels a paid ERP Armor: Learning subscription plan, the cancellation will become effective at the end of the then-current billing cycle. When a participant cancels a paid plan, their account will revert to a free account and Teachable may disable access to features available only to paid plan users.

Complaint Resolution: At ERP Armor: Learning, we are committed to providing a positive learning experience for all our users. If a participant has a complaint regarding any aspect of our learning platform or services, these steps should be followed: Participant(s) should email [email protected] and provide as much detail as possible about the complaint, including any relevant screenshots, account information, or transaction details. Upon receiving the complaint, ERP Risk Advisors’ support team will acknowledge it within 24 hours during business days. ERP Risk Advisors’ support team will investigate the complaint thoroughly. This may involve reviewing relevant records, consulting with appropriate personnel, and gathering additional information as necessary. ERP Risk Advisors aims to resolve all complaints as quickly as possible. Depending on the complexity of the issue, resolution may take up to 5 business days or more. During this time, ERP Risk Advisors will keep the participant(s) informed of the progress and any steps being taken to address their concerns. Once a resolution has been proposed, ERP Risk Advisors will contact the participant(s) to discuss the outcome. If participant(s) are dissatisfied with the initial resolution provided by ERP Risk Advisors’ support team, they may request that their complaint be escalated. Escalations will be reviewed by a senior manager to ensure a fair and impartial review of concerns. ERP Risk Advisors treats all complaints with the utmost confidentiality. Information provided will only be used for the purposes of investigating and resolving a complaint, in accordance with our Privacy Policy. For more information regarding administrative policies such as complaints and feedback, please contact our support desk at [email protected].

*****

ERP Risk Advisors is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have the final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.nasbaregistry.org