ISO 31000
ISO 31000 doesn't hand you a checklist and call it risk management. It gives you a repeatable process, from establishing the framework to monitoring and review. Here's each step explained, and how it maps onto PECB certification.
ISO 31000
ISO 31000 Risk Manager and Lead Risk Manager sound almost identical, but they're built for two different points in a risk management career. Here's the difference, without the jargon.
PECB
Everything you need to know about the PECB ISA/IEC 62443 Lead Implementer certification: what the ISA/IEC 62443 standard covers, the five-day course curriculum, the 80-question open-book exam, the four credential tiers, and how self-study compares to corporate live online and onsite training.
PECB
PECB is now the first certification body in the world accredited by UKAS to certify individuals implementing and auditing AI systems covering the ISO 42001 Lead Implementer and Lead Auditor schemes. Here's what that means for candidates enrolling and why employers will start preferring PECB.
AI Governance
A working generative AI governance policy template for enterprises — 13 clauses, mapped to ISO 42001, NIST AI 600-1, and the EU AI Act. Written for the CISO, CAIO, DPO, or governance lead actually drafting the document.
AI Governance
If you run COBIT assessments, hold CISA, CRISC, or ISO 27001, or sit inside an IT governance function, you already own roughly 70% of what AI governance requires. This guide maps the 30% gap and lays out a 90-day plan built around ISO 42001.
AI Governance
Becoming a CAIO in 2027 requires 10 to 15 years of technology leadership, credible AI experience, and formal governance credentials boards recognise. This guide covers the realistic competency framework, career paths, a certification roadmap, a 6-month execution plan for experienced leaders.
ISO 31000 doesn't hand you a checklist and call it risk management. It gives you a repeatable process, from establishing the framework to monitoring and review. Here's each step explained, and how it maps onto PECB certification.
PECB is now the first certification body in the world accredited by UKAS to certify individuals implementing and auditing AI systems covering the ISO 42001 Lead Implementer and Lead Auditor schemes. Here's what that means for candidates enrolling and why employers will start preferring PECB.
A working generative AI governance policy template for enterprises — 13 clauses, mapped to ISO 42001, NIST AI 600-1, and the EU AI Act. Written for the CISO, CAIO, DPO, or governance lead actually drafting the document.
If you run COBIT assessments, hold CISA, CRISC, or ISO 27001, or sit inside an IT governance function, you already own roughly 70% of what AI governance requires. This guide maps the 30% gap and lays out a 90-day plan built around ISO 42001.
Level Up Your AI & Cybersecurity Knowledge
Cybersecurity professionals are the strongest candidates for AI governance in 2026, the risk, controls, audit, and evidence disciplines transfer almost 1:1. This guide is the step-by-step transition plan: what AI governance actually covers, the career sequence, and the certification pathway.
ISO 42001 without ISO 27001 is a certificate, not governance. Clause 6.1.4, Annex A, and EU AI Act Article 10 all assume an operational ISMS underneath and auditors are catching on. Here is the sequence that actually works
Three certification bodies operate an ISO 42001 Lead Implementer scheme at scale: PECB, BSI Training Academy, and Exemplar Global. This article covers the one that leads the market- PECB and why AI governance professionals, enterprise procurement teams, and government buyers are converging on it
AIGP is an overview-level credential built around a policy-and-vocabulary exam. PECB CAIM and ISO 42001 Lead Implementer are built on four-day applied bodies of knowledge, delivered trainer-led or via PECB self-study and e-learning. Our view: the LI + LA pair is the strongest AIMS career move.
Canada has no federal AI Act. Instead, organizations navigate PIPEDA, Quebec Law 25, OSFI E-23, Treasury Board ADM rules, Ontario guidance and the EU AI Act. ISO/IEC 42001 provides the only certifiable AI management system, helping meet overlapping governance and compliance requirements.
ISO/IEC 42001 is fast becoming the operational governance framework of choice for German organisations under the EU AI Act and the draft KI-MIG. This guide covers the KI-MIG supervisory architecture (BNetzA, BaFin, BfDI, BSI), sector-specific implications, training and AI credentials.
On 2 August 2026 the EU AI Act's Article 50 transparency rules, penalties, and GPAI supervisory powers take full effect — but high-risk obligations moved to 2027 and 2028 under the Digital Omnibus. A practitioner's guide to what still bites, what shifted, and the dated compliance roadmap.
ISO/IEC 42001 is the only certifiable AI management system standard. For Dutch providers and deployers it produces the governance and control base that overlaps with EU AI Act obligations under AP and RDI supervision. PECB Lead Implementer, Lead Auditor, and AI credential training in Amsterdam.
ISO 42001, NIST AI RMF, EU AI Act, and OECD AI Principles do different jobs. Here is which one does what, and how they layer in a working programme.
DIFC Regulation 10 is the world's first data protection regulation written for AI and autonomous systems. Here is what it covers, who it applies to, and how to comply.
An AI Governance Committee drives accountability for your AI Management System under ISO/IEC 42001 Clause 5. Get the charter template and RACI matrix mapping AIMS decisions to accountable roles, aligned with ISO 42001, ISO 27001, and EU AI Act Articles 26 & 27.
Take ISO/IEC 42001 Lead Implementer first, then add Lead Auditor. You have to know how to build an AI management system before you can audit one. Lead Auditor first only if you already audit for a living. For most, the bundle is the strongest single decision.