AI risk governance training for boards and senior management
This programme gives directors and senior executives what they need to oversee AI: where AI creates risk, what SR 26-2, the FSB sound practices and the MAS guidelines expect of boards, how to set AI risk appetite, what reporting to demand, and which questions to ask management about generative and agentic AI.
Boards are now expected to oversee AI adoption in line with strategy and risk appetite. Most directors have not been trained to do so.
Who is this course for?
Board members, CEOs, CROs, CCOs, CIOs and heads of internal audit at banks, insurers, brokerages and fintechs.
What does the course cover?
- How AI creates model, operational, cyber, conduct and third-party risk
- Board duties under the FSB sound practices and MAS guidelines
- SR 26-2 and why generative and agentic AI need separate governance
- Setting AI risk appetite and reporting
- Case studies of AI failures and losses
- Twenty questions directors should ask management
How is it delivered?
In-house, at a venue or online, as a half-day board session or a one- to two-day programme for specialists. Content is adapted to your institution's jurisdiction and AI use, using the Doorstep risk register for practical exercises. Led by Ahmer Nehal, former Head Risk and Fraud and SVP Operational Risk, who has trained senior management in Pakistan and the UAE.
Primary sources (reviewed 17 Oct 2026)
- Financial Stability Board: Sound Practices for Responsible Adoption of Artificial Intelligence, final report (15 October 2026)
- Monetary Authority of Singapore: Guidelines on Artificial Intelligence Risk Management (7 October 2026)
- Federal Reserve, OCC and FDIC: SR 26-2, Revised Guidance on Model Risk Management (17 April 2026)
This page explains supervisory guidance in plain language. It is not legal advice; confirm how each text applies to your institution and jurisdiction.
Frequently asked questions
How long is the board session?
Typically a half day, with a follow-up workshop for management if needed.
Put these controls to work this month
Start on the cloud risk management software within 24 hours, or ask for training or advice tailored to your institution.