If you own AI in your business: the route

For the one person who owns AI in the business: the policy, the tool list, the register, and what happens when something goes wrong. These are the modules that matter most to that job, in the order worth taking them. They sit in the Intermediate and Advanced courses.

1. Intermediate 1: See what your team is actually doing with AI
   Map where your team uses AI and name the two highest data-leakage risks in your own workflow.
2. Intermediate 2: Find the shadow AI already in your team
   Surface the AI tools already in use, including the ones a supplier switched on for you, and decide, for each one, whether to approve, replace or stop it.
3. Intermediate 3: Set access without grinding work to a halt
   Decide who can use which AI tools and with what data, using least privilege without blocking legitimate work.
4. Intermediate 6: Write an AI policy people will actually follow
   Draft a short AI acceptable-use policy your team will read and follow.
5. Intermediate 7: When something goes wrong
   Respond to an AI-related data leak in the right order, and know when the Privacy Act 2020 requires you to notify.
6. Advanced 2: Map where AI is worth it
   Identify and prioritise the AI use-cases in your business that offer the best return for the least risk.
7. Advanced 3: Check a vendor before you trust them
   Run practical due diligence on an AI vendor so you know how they handle your data, secure it, and whether they will still be here next year.
8. Advanced 6: Write an organisation AI policy
   Draft an organisation-level AI policy that sets direction, roles, and rules without becoming shelfware.
9. Advanced 8: Keep AI safe over the long run
   Set up ongoing governance so AI stays safe, accountable, and current as tools, uses, and rules change.

Your review calendar

Advanced 8 teaches reviewing on a rhythm and on events. This turns that into a sheet you can pin up. Tick each line when it is done.

Print this page