AI governance workshop for staff
Roll out AI fast, without breaking trust. This is the staff workshop: people practise what can go into a tool, when to check an output, and the guardrails in your policy. Boards, executive teams and risk teams write the policy and name the owners in the AI governance program.
- Staff workshop
- In person or remote
- Built around your policy
◆ Trusted by teams at ◆
The problem
Rolling out AI is easy. Governing it is not.
Shadow AI everywhere
Staff pasting sensitive and client data into tools no one approved or vetted.
One bad output
A single hallucination or biased decision becomes a legal, regulatory or reputational problem.
The rules are moving
EU AI Act, privacy law, sector regulators. "We didn't know" is no longer a defence.
Governance kills adoption
Heavy-handed rules freeze the very innovation you rolled AI out to get.
Built on the standards
Grounded in the frameworks that matter
NIST AI RMF
The risk operating model: Govern, Map, Measure, Manage.
ISO/IEC 42001
The certifiable AI management system standard.
EU AI Act
Risk-tiered legal obligations, enforceable from 2026.
OECD and local guardrails
Responsible AI principles, plus the rules in your jurisdictions.
Two rooms
Staff practise here. The board program writes the rules.
This page is the staff workshop. The board, executive and risk program is the other room.
Staff workshop
People who use AI in their jobs. They practise what can go into a tool, when to check an output, and the guardrails already in your policy. In person or remote.
Board, executive and risk program
The board, the executive team or the risk team writes the policy, names the owners and leaves with a framework the team can run.
The curriculum
Foundations
Staff in this workshop practise everyday use. The operating model is written in the board, executive and risk program.
BOTH
Why AI governance matters
The risk and reward case, and what goes wrong without guardrails.
BOTH
The regulatory landscape
EU AI Act, NIST, ISO 42001 and local rules, in plain English.
LEADERS
Risk classification
Tiering AI use cases from minimal to high risk.
Responsible AI principles
What good use looks like
BOTH
Fairness and bias
Where bias enters, and how to spot and mitigate it.
BOTH
Transparency and disclosure
Explaining AI decisions, and telling people AI is in use.
BOTH
Accountability and oversight
Human in the loop, and who owns an AI decision.
BOTH
Privacy and data governance
What data can go into AI: personal information, consent, residency.
Everyday governance
What staff do on a Tuesday
ALL STAFF
Acceptable use and shadow AI
Approved versus unapproved tools, and reining in shadow use.
ALL STAFF
Data security and confidentiality
Not leaking sensitive data. Prompt hygiene. Intellectual property.
ALL STAFF
Output risk and over-reliance
Hallucinations, verification, and when not to trust it.
BOTH
IP, copyright and ownership
Who owns outputs, and what training data and inputs expose.
The other room
What the board program puts in place
These sessions sit on the AI governance program page. Staff in this workshop practise the rules written there.
LEADERS
Roles and accountability
An AI governance council, a RACI, and clear ownership.
LEADERS
Use-case intake and approval
A lightweight process to vet AI before it goes live.
LEADERS
Monitoring and incident response
Logging, monitoring, and what to do when AI misfires.
LEADERS
Vendor and third-party risk
Vetting AI vendors and how they handle your data.
People and culture
Guardrails that still let people move
ALL STAFF
AI literacy for all staff
A baseline so everyone uses AI responsibly.
BOTH
A responsible AI culture
Safe to raise concerns and report issues early.
BOTH
Governance without killing innovation
Guardrails that enable adoption, not freeze it.
What you'll get
What changes
- Staff who use AI safely, without leaking data or blindly trusting output
- A shared, plain-English acceptable-use standard everyone actually understands
- A plain standard staff can use on a Tuesday, against the policy the organisation already has
- A clear path to the board, executive and risk program when the policy and the owners still need writing
- Guardrails that enable AI adoption instead of freezing it
Format and logistics
How it runs
Staff workshop
Everyday use, and it scales across the company via multiple cohorts.
Board, executive and risk program
The policy, the owners and the framework are written in the AI governance program.
Delivery
In person or purpose-built remote.
Tailoring
Built around your policies, tools, jurisdictions and risk appetite.
Facilitator
Steve Glaveski
Founder of Collective Campus, 2× Wiley author and HBR contributor on AI and the future of work. Steve has helped 100+ organisations adopt AI and innovation responsibly, and he runs these programs himself.
Proof
Grounded in NIST, ISO 42001 and the EU AI Act
These are the frameworks regulators, auditors and customers use when they ask whether AI is under control. Staff leave this workshop with a plain-English standard for what is okay on a Tuesday. The board, executive and risk program is where the operating model gets written.
NIST AI RMF
Govern, Map, Measure, Manage. The risk operating model leaders leave able to use.
ISO/IEC 42001
The certifiable management system for AI, translated into roles and routines.
EU AI Act
Risk-tiered obligations, enforceable from 2026, mapped to what your people actually do.
FAQ
Questions we get asked
Is this a legal or technical course?
No. It is practical and plain English, built for all staff and for leaders, not only lawyers or engineers.
Which frameworks do you teach?
NIST AI RMF, ISO/IEC 42001 and the EU AI Act, mapped to your jurisdictions and translated into what people actually need to do.
Do we need the program as well?
Most large organisations do. Staff practise everyday use in this workshop. The board, the executive team or the risk team writes the policy and the owners in the AI governance program.
Can it be tailored to our policies and tools?
Yes. We build it around your acceptable-use policy, approved tools, risk appetite and regulatory exposure.
In person or remote?
Both, and the all-staff tier scales across the organisation via multiple cohorts.
Related programs
Where this sits with the other AI work
Book the staff workshop.
Tell us which teams will practise everyday use, and which policy they should follow.