ISACA Advanced in AI Security Management (AAISM) Training Course

This live, instructor-led training offered in Denmark (online or on-site) is tailored for intermediate-level enterprise leaders seeking to master the responsible governance and security of AI systems in accordance with emerging global frameworks, including the EU AI Act, GDPR, ISO/IEC 42001, and the U.S. Executive Order on AI.

By the end of the session, participants will be able to:

• Identify the legal, ethical, and regulatory risks of deploying AI across different departments.
• Interpret and implement major AI governance frameworks, such as the EU AI Act, NIST AI RMF, and ISO/IEC 42001.
• Establish comprehensive security, auditing, and oversight policies for enterprise AI integration.
• Create guidelines for procuring and utilizing both third-party and in-house AI solutions.

Artificial Intelligence (AI) brings new dimensions of operational risk, governance challenges, and cybersecurity exposure for government agencies and departments.

This instructor-led live training, available online or onsite, is designed for public sector IT and risk professionals with limited prior experience in AI. It helps them understand how to evaluate, monitor, and secure AI systems within a government or regulatory context.

By the end of this training, participants will be able to:

• Interpret key risk concepts related to AI systems, including bias, unpredictability, and model drift.
• Apply AI-specific governance and auditing frameworks such as NIST AI RMF and ISO/IEC 42001.
• Recognize cybersecurity threats targeting AI models and data pipelines.
• Establish cross-departmental risk management plans and policy alignment for AI deployment.

Format of the Course

• Interactive lecture and discussion of public sector use cases.
• AI governance framework exercises and policy mapping.
• Scenario-based threat modeling and risk evaluation.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This course provides a practical introduction to securing modern AI-powered applications, APIs, copilots, and autonomous agents. Participants learn how AI security differs from traditional web security, explore common AI-specific threats such as prompt injection, RAG poisoning, and agent abuse, and understand how to protect AI systems using layered defenses including WAFs, AI gateways, API security, and guardrails. Through hands-on labs and real-world examples, students gain the skills to identify AI attack patterns, secure LLM-based applications, and deploy effective runtime defenses for production environments.

This instructor-led, live training in Denmark (online or onsite) is aimed at beginner-level to intermediate-level IT professionals who wish to understand and implement AI TRiSM in their organizations.

By the end of this training, participants will be able to:

• Grasp the key concepts and importance of AI trust, risk, and security management.
• Identify and mitigate risks associated with AI systems.
• Implement security best practices for AI.
• Understand regulatory compliance and ethical considerations for AI.
• Develop strategies for effective AI governance and management.

This live, instructor-led session in Denmark (online or in-person) is designed for intermediate to advanced AI developers, architects, and product managers seeking to identify and mitigate risks in LLM-driven applications. It covers threats such as prompt injection, data leaks, and unregulated output, while teaching the implementation of security controls like input validation, human-in-the-loop supervision, and output guardrails.

Upon completion, participants will be equipped to:

• Recognize fundamental vulnerabilities within LLM-based systems.
• Implement secure design principles in LLM application architectures.
• Leverage tools like Guardrails AI and LangChain for validation, filtering, and safety measures.
• Incorporate techniques such as sandboxing, red teaming, and human-in-the-loop reviews into production-ready pipelines.

This course instructs software developers on building AI-powered applications with security as a core design principle. Participants learn to defend chatbots, copilots, RAG pipelines, and AI agents against AI-specific threats, including prompt injection, data poisoning, tool abuse, secret leakage, and insecure model output. The syllabus covers secure prompt design, RAG security, least-privilege access, guardrails, and red-team testing, enabling developers to create AI features that are secure, reliable, and resilient in production environments.

Description:

The CISA® certification is globally recognised as the leading credential for professionals specialising in IS audit and IT risk consulting.

Our CISA programme is an intensive, highly competitive, and exam-driven training experience. Drawing on over 150 CISA training deliveries across Europe and internationally, along with more than 1,200 trained delegates, Net Security has developed in-house materials specifically designed to maximise exam success for the ISACA CISA® assessment. The methodology emphasises a deep understanding of CISA auditing concepts, supported by extensive practice with ISACA-released question banks from the last three years. Over time, CISA certification has been in high demand within leading accounting firms, global banks, advisory services, assurance teams, and internal audit departments.

Even delegates with years of IT auditing experience may find that their approach to solving CISA questions depends heavily on their grasp of globally accepted IT assurance practices. The CISA exam is notoriously challenging due to the frequent presence of two highly similar answer options, testing your nuanced understanding of global IT auditing standards. To help navigate these challenges, we assign top-tier trainers with extensive international experience in delivering CISA training.

The Net Security CISA manual comprehensively covers all exam-relevant concepts, case studies, and Q&A across the five CISA domains. Additionally, trainers provide key supplementary materials, including relevant notes, question banks, glossaries, videos, revision documents, exam tips, and mind maps throughout the course.

Goal:

The primary objective is to help you pass the CISA examination on your first attempt.

Objectives:

• Apply the knowledge gained in a practical way that benefits your organisation
• Deliver audit services in line with IT audit standards
• Provide assurance on leadership, organisational structure, and processes
• Provide assurance on the acquisition, development, testing, and implementation of IT assets
• Provide assurance on IT operations, including service operations and third-party management
• Provide assurance on the organisation's security policies, standards, procedures, and controls to safeguard the confidentiality, integrity, and availability of information assets.

Target Audience:

Finance/CPA professionals, IT specialists, internal and external auditors, information security experts, and risk consulting professionals.

Description:

Please note that the updated CISM exam content outline applies to examinations commencing from 1 June 2022.

The CISM® credential is currently the most highly regarded and rigorous certification for Information Security Managers worldwide. It serves as a gateway to an elite professional network dedicated to continuous learning and adapting to the evolving landscape of Information Security Management.

Our CISM training approach delivers comprehensive coverage across the four CISM domains, emphasizing conceptual understanding and the resolution of ISACA-published CISM exam questions. The course is designed as an intensive, rigorous preparation for ISACA’s Certified Information Security Manager (CISM®) Examination.

Our instructors strongly recommend that all participants review the ISACA-published CISM QA&E (Questions, Answers and Explanations) as part of their exam preparation. This resource is invaluable for understanding ISACA’s question style, problem-solving approaches, and for rapid assimilation of CISM concepts during live classroom sessions.
All our trainers possess extensive experience in delivering CISM training, ensuring you are thoroughly prepared for the CISM examination.

Goal:

The primary objective is to enable you to pass the CISM examination on your first attempt.

Objectives:

• Apply the acquired knowledge in a practical manner that benefits your organization.
• Establish and sustain an information security governance framework aligned with your organizational goals and objectives.
• Manage information risk to an acceptable level to satisfy business and compliance requirements.
• Establish and maintain information security architectures encompassing people, processes, and technology.
• Integrate information security requirements into third-party contracts and supplier activities.
• Plan, establish, and manage the capability to detect, investigate, respond to, and recover from information security incidents to minimize business impact.

Target Audience:

• Security professionals with 3–5 years of hands-on experience.
• Information security managers or those holding management responsibilities.
• Information security staff and assurance providers seeking an in-depth understanding of information security management, including CISOs, CIOs, CSOs, privacy officers, risk managers, security auditors, compliance personnel, BCP/DR personnel, and executive or operational managers responsible for assurance functions.

Description:

As digital threats increasingly affect businesses globally, the demand for skilled cybersecurity professionals continues to surge. Most professionals surveyed by ISACA acknowledge this trend and intend to take on roles requiring strong cybersecurity expertise. To bridge this talent gap, ISACA has created the Cybersecurity Fundamentals Certificate, offering both education and skill verification in this critical field.

Objectives:

With rising threats and a worldwide shortage of qualified security professionals, ISACA's Cybersecurity Fundamentals Certificate programme is an ideal solution for rapidly upskilling entry-level staff. It ensures they acquire the necessary skills and knowledge to operate effectively within the cyber domain.

Target Audience:

This certification programme is also an excellent starting point for acquiring foundational cybersecurity knowledge and beginning to develop expertise in this essential area.

This instructor-led live training in Denmark (online or onsite) is aimed at intermediate-level AI and cybersecurity professionals who wish to understand and address the security vulnerabilities specific to AI models and systems, particularly in highly regulated industries such as finance, data governance, and consulting.

By the end of this training, participants will be able to:

• Understand the types of adversarial attacks targeting AI systems and methods to defend against them.
• Implement model hardening techniques to secure machine learning pipelines.
• Ensure data security and integrity in machine learning models.
• Navigate regulatory compliance requirements related to AI security.

This live, instructor-led training in Denmark—delivered either online or onsite—targets security engineers and compliance professionals aiming to strengthen EXO deployments, manage model access rights, and supervise AI workloads running exclusively on-premise.

This instructor-led live training in Denmark (online or onsite) is tailored for beginner-level IT security, risk, and compliance professionals seeking to master foundational AI security concepts, threat vectors, and global frameworks such as the NIST AI RMF and ISO/IEC 42001.

By the end of the training, participants will be able to:

• Understand the specific security risks associated with AI systems.
• Identify threat vectors like adversarial attacks, data poisoning, and model inversion.
• Apply foundational governance models, including the NIST AI Risk Management Framework.
• Align AI usage with emerging standards, compliance guidelines, and ethical principles.

This instructor-led, live training in Denmark (online or onsite) targets security and ML engineers focused on identifying, testing, and defending against attacks on ML models and LLM-driven applications.

Based on the latest OWASP GenAI Security Project guidance, participants will learn to identify, assess, and mitigate AI-specific threats through hands-on exercises and real-world scenarios.

This live, instructor-led training in Denmark, offered online or on-site, targets advanced professionals aiming to implement and assess techniques such as federated learning, secure multiparty computation, homomorphic encryption, and differential privacy within real-world Machine Learning pipelines.

Upon completion of this program, participants will be equipped to:

• Evaluate and contrast fundamental privacy-preserving methodologies in Machine Learning.
• Deploy federated learning systems leveraging open-source frameworks.
• Utilize differential privacy to ensure secure data exchange and robust model training.
• Leverage encryption and secure computation methods to shield model inputs and outputs.