Securing AI at Work: Advanced
Govern and secure AI tools and agents for your team or organization
This course from the Enterprise Technology Association (ETA) is for people who lead or govern AI security for a team, department or small organization. You'll learn to set up AI security governance with the NIST AI Risk Management Framework, run an approved-tools and shadow AI program, review AI vendors, threat-model AI workflows, put guardrails and testing around agents, monitor AI use, respond to AI incidents and brief leaders. You'll finish with a capstone: an AI security plan for your own team, reviewed by ETA.
What you'll learn
- How to govern AI security with the NIST AI RMF (Govern, Map, Measure, Manage) and its Generative AI Profile
- How to run an AI inventory, risk tiers, an approved-tools list and a shadow AI program
- How to review AI vendors and set contract expectations
- How to threat-model an AI workflow using the OWASP Top 10 for LLM and Agentic Applications
- How to design agent guardrails, test AI systems and monitor them in production
- How to respond to AI incidents and communicate AI risk to leaders and staff
Who it's for
Team leads, IT and security generalists, operations and compliance leaders and anyone accountable for how a team uses AI safely. You should have finished Securing AI at Work: Practitioner or have equivalent experience. It pairs with AI Governance and Security, an ETA Specialist course, which goes deeper on policy and regulation.
How it works
Three modules and a capstone, with a hands-on Try it exercise in every lesson, a knowledge check at the end of each module and a final assessment that includes your capstone summary. An ETA reviewer grades the capstone before the course completes (3 credit hours). This course and Cyber Fluency: Advanced make up Level 3: Advanced of the ETA Certified Cyber Fluent Professional.
This course teaches AI security management practice. It is not legal advice; AI laws and contract obligations vary by location and sector.
