AI Data Classification and Governance Express Course

Product Details

This course provides a scenario-based learning experience in which learners take on the role of a security and governance professional responding to the discovery of Shadow AI within an enterprise environment.

Through a structured case study, learners investigate AI-enabled systems that have been introduced through vendor updates without formal review, creating visibility, compliance and data risk challenges.

Learning Experience:

• Text-based content
• Interactive applied scenario
• Downloadable templates
• Validation of completion 
• 24/7/365 technical support 

---

Who Will Benefit

This course is designed for security analysts, GRC practitioners, risk and compliance professionals and security managers responsible for assessing, managing and communicating risk in AI-enabled environments. Learners should have a foundational understanding of security, governance and compliance practices and an interest in applying those practices to AI systems.

---

Key Topics

• Shadow AI risk identification and visibility challenges
• AI asset inventory and system discovery
• Data classification and sensitivity-based risk assessment
• AI risk tiering and prioritization models
• Control assessment using NIST SP 800‑53-aligned practices
• Data governance, including handling, storage and vendor data use restrictions
• Vendor risk and data processing agreement (DPA) analysis
• Risk treatment, documentation and communication within existing RMF processes

---

Learning Outcomes

• Build an AI asset inventory to establish visibility into systems using AI
• Classify data based on sensitivity and regulatory impact
• Prioritize risk using a tiered model combining data sensitivity and AI activity
• Assess control gaps using established frameworks, such as NIST SP 800‑53
• Determine appropriate risk treatment actions and communicate findings to stakeholders

---

Benefits

• Apply data classification levels to AI-related data based on sensitivity, regulatory requirements and business impact
• Determine the protections required for AI-related data, including access limits, handling rules, storage safeguards and vendor data use restrictions
• Identify AI-specific data risks, such as training data reuse, model memorization, retained outputs and unintended data propagation
• Evaluate whether governance and security controls sufficiently reduce AI-related data risk  
• Earn CPE credits

---

Program Completion

Learners have 60 days from the date of purchase to complete the entire course. Those who successfully complete this course will receive a digital Validation of Completion and earn continuing professional education (CPE) credits. We recommend that you download and retain the Validation of Completion for your personal records.

To receive a Validation of Completion and earn CPE credits, learners must:

• Complete the learning experience
• Complete the learning experience evaluation

---

Credit Info

CPE Credits	Group A	1
Field of Study	Governance, Risk and Compliance
Level	Intermediate
Prerequisites	Learners should have a foundational understanding of security, governance and compliance practices and an interest in applying those practices to AI systems.
Access	Online	This is a digital product. The content will be available up to 60 days after purchase date.

For more information, please refer to the ISC2 Certification Maintenance Handbook for additional CPE requirement details.

---

CPE Credit Reporting

CPE credits earned from this learning experience will automatically be reported for ISC2 credentials on the first day of every month. Please allow up to 10 business days for processing.

CPE credits earned for this learning experience may also be eligible for continuing professional education credits for non-ISC2 certifications. Please visit the continuing education requirements established by the credentialing organization for eligibility.

For questions related to ISC2 CPE credits or the CPE portal not covered in the handbook, please contact us via our online form.

Delivery

A stable internet connection is required. To record your completion of the online learning experience, please ensure you are connected to the internet at all times.

---

Cancellation Policy

Refunds are not provided for ISC2 learning experiences.