Learning journey
DATA FOUNDATION → AI INVENTORY & RISK TIERING → MINIMUM CONTROLS → AUDITING AI-ENABLED PROCESSES → AI-ASSISTED SOX TESTING → CYBER RESILIENCE → GOVERNANCE DECISION
What it is
Event promise
Practical differentiator
Major tentative topics
- Data ownership, lineage, quality, retention, and critical data elements
- AI use-case intake, accountable owners, prohibited uses, and risk classification
- Model and data risk: validation, bias, drift, explainability, and third-party dependencies
- Minimum viable AI governance toolkit: RACI, committee design, policy clauses, escalation
- Cyber resilience: ransomware readiness, zero trust, incident response, and evidence
- AI-assisted SOX testing: guardrails, prompt governance, human-in-the-loop, auditor reliance
Learning outcomes
- 1.Assess whether data governance is sufficiently mature to support trustworthy AI.
- 2.Build an AI inventory, assign ownership, and apply a risk-tiering methodology.
- 3.Define a minimum control set covering data, access, change, validation, human review, monitoring, third parties, and incident escalation.
- 4.Design audit procedures for AI-enabled business processes and apply controlled AI techniques to selected SOX testing activities.
- 5.Evaluate cyber-resilience considerations — ransomware readiness, zero trust, third-party dependencies, incident response, and audit evidence — and use a practical decision framework to approve, restrict, remediate, or reject an AI use case.
Proposed agenda
Full-day, in-person conference with demonstrations, guided exercises, and a decision-based tabletop.
Arrival, sponsor visibility, and collection of attendee AI-governance questions.
Data ownership, lineage, quality, access, retention, critical data elements, and why faulty data produces faulty AI.
Inventory templates, use-case intake, accountable owners, prohibited uses, and risk classification.
Networking and refreshments.
Practical evidence, thresholds, change controls, monitoring, exceptions, and third-party dependencies.
Governance RACI, committee design, policy clauses, control standards, escalation, and incident response.
Lunch, networking, and an optional career breakout covering CV tips, interview preparation, and job-search strategies.
Scoping AI-enabled processes while considering ransomware readiness, zero trust, third-party dependencies, incident response, evidence, human review, and output validation.
Narratives, RCM review, SOC/IPE extraction, testing support, deficiency analysis, prompt governance, human-in-the-loop review, and external-auditor alignment.
Networking and refreshments.
Teams create the inventory entry, risk tier, minimum controls, evidence requirements, and audit questions.
Participants make and defend an AI deployment decision using governance, control, and cyber-resilience considerations.
Commitments and practical next steps.
Primary audience
Secondary audience
Speaker architecture
Preferred operating model: 1 anchor practitioner + 2 technical/governance specialists + cyber-assurance expertise + 1 hands-on lab or tabletop facilitation team.
Attendee take-home tools
- AI use-case inventory and intake template
- Risk-tiering criteria and governance RACI
- Minimum-control checklist and audit work program
- Controlled AI-for-SOX testing use case with guardrails
- Cyber-resilience audit question set
Interested in sponsoring or speaking at this event?
Sponsorship packages and speaking opportunities are coordinated by the Programs Committee.
Contact Us* All dates, venues, pricing, speaker assumptions, and CPE eligibility remain preliminary and subject to Board and Certification/NASBA validation, and may change without further notice.