A tailored course, built for your situation
Deeper command of the AI governance frameworks shaping federal tech delivery
Master the standards, controls, and compliance architectures defining responsible AI in national security contexts
The situation this course is for
Who this is for
Senior technologist in federal consulting or defense contracting who operates at the boundary of technical implementation and regulatory compliance, influencing architecture decisions with policy-aware reasoning
Who this is not for
Entry-level compliance staff, commercial-sector AI developers, or practitioners focused solely on model performance without governance integration
What you walk away with
- Navigate NIST AI RMF and EO 14110 requirements with confidence, not consultation
- Map governance controls directly to system design choices without intermediary translation
- Produce compliance-ready documentation that passes internal review on first submission
- Anticipate audit questions using pre-built logic trees from recent federal engagements
- Lead cross-functional alignment using standardised terminology and artefact templates
The 12 modules (with all 144 chapters)
- Overview of Govern, Map, Measure, Manage
- Function 1: Govern leadership roles
- Function 2: Map risk contexts
- Function 3: Measure performance gaps
- Function 4: Manage mitigation paths
- Integration with existing RMF workflows
- Mapping to DoD AI Ethics Principles
- Using the profile builder worksheet
- Tailoring for classified environments
- Case example: IC drone analytics project
- Linking to procurement language
- Maintaining version control
- Section-by-section breakdown
- Red-teaming mandate scope
- Dual-use foundation model rules
- Agency reporting timelines
- Safety testbench expectations
- Incident sharing protocols
- Watermarking requirements
- Federated evaluation design
- Compliance checklist for vendors
- Internal audit preparation steps
- Handling classified model variants
- Mapping to existing security controls
- Control families affected by AI
- AC-02: Account management for AI agents
- AU-06: Audit logging for model decisions
- CM-08: Configuration settings for LLMs
- SI-11: AI-generated content filters
- SC-15: Interactive AI system protections
- RA-10: Adversarial testing frequency
- PM-31: AI use case inventories
- Custom control supplements
- Evidence collection templates
- Third-party assessment pathways
- Continuous monitoring integration
- Identifying overlapping controls
- Resolving conflicting thresholds
- Prioritising high-impact items
- Using the harmonisation scorecard
- Decision log for leadership review
- Handling classified data flows
- Cross-walk with CMMC requirements
- Mapping to internal governance boards
- Versioning multi-framework policies
- Change management for updates
- Stakeholder communication plan
- Integration with DevSecOps pipeline
- SoA drafting with AI-specific sections
- POA&M entries for model risks
- Security plan integration points
- Control implementation narratives
- Evidence package organisation
- Template reuse across engagements
- Version control for artefacts
- Review cycle reduction tactics
- Pre-submission validation checklist
- Collaboration with legal teams
- Handling classification markings
- Delivery formats for different agencies
- Common findings in AI reviews
- Root cause analysis of failed controls
- Evidence sufficiency thresholds
- Interview preparation framework
- Document trail completeness test
- Model card inspection points
- Training data provenance checks
- Bias assessment methodology review
- Incident response plan validation
- Red team report expectations
- Chain of custody documentation
- Lessons from recent ATO denials
- Parsing policy language into constraints
- Defining measurable thresholds
- Setting logging granularity levels
- Specifying model monitoring intervals
- Input validation rules for prompts
- Output filtering configurations
- Human-in-the-loop integration points
- Fail-safe behaviour definitions
- Drift detection parameters
- Retraining triggers and thresholds
- Version rollback procedures
- Integration with existing spec templates
- Glossary of standardised terms
- Risk tier definition framework
- Decision impact assessment matrix
- Stakeholder alignment checklist
- Conflict resolution playbook
- Meeting facilitation templates
- Escalation path definitions
- Change approval workflows
- Documentation ownership rules
- Version control for decisions
- Feedback loop design
- Conflict tracking log
- Pre-commit hooks for policy checks
- Model card generation automation
- Data provenance tagging scripts
- Bias detection in training pipelines
- Logging configuration validators
- Drift monitoring integration
- Compliance gate design
- Automated SoA updates
- Version comparison tools
- Policy change impact analysis
- Integration with GitOps tools
- Validation against control baselines
- RFP language for AI compliance
- Third-party audit rights definition
- Model transparency requirements
- Right-to-explain clauses
- Penalties for non-compliance
- Ongoing monitoring expectations
- Subcontractor flow-down rules
- Security assessment coordination
- Incident notification timelines
- Access to training data logs
- Model update approval process
- Exit strategy and data return
- Derivative classification triggers
- AI-generated classified content
- Handling multi-level data inputs
- Secure prompt design principles
- Output sanitisation procedures
- Air-gapped model training
- Personnel clearance requirements
- Facility accreditation considerations
- Transmission protection methods
- Storage segmentation rules
- Declassification pathways
- Incident reporting for leaks
- Monitoring for new guidance
- Change impact scoring system
- Policy version compatibility matrix
- Control substitution rules
- Modular architecture design
- Grace period planning
- Stakeholder notification templates
- Legacy system integration
- Transition period documentation
- Phased rollout planning
- Backward compatibility testing
- Decommissioning legacy controls
How this maps to your situation
- When standing up a new AI system under federal oversight
- During pre-audit preparation for ATO submission
- While drafting technical specifications for an AI capability
- When aligning cross-functional teams on governance expectations
Before vs. after
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3-4 hours per module, designed for completion over 6-8 weeks with real-world application between sections.
How this compares to the alternatives
Unlike generic AI ethics courses or broad compliance overviews, this program focuses exclusively on the operationalisation of current federal AI governance mandates into technical implementation decisions used in active DoD and intelligence community programs.
Frequently asked
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.