Description

A focused course, tailored for you

EU AI Act Implementation Playbook for Enterprise Consulting Engagements

Build the EU AI Act implementation programme from scratch in 10 weeks. Article 6 high-risk system classification + Article 9-15 governance + technical-documentation pack.

The EU AI Act prohibited-AI provisions are in force since February 2025; general-purpose AI provisions since August 2025; high-risk system obligations land August 2026. Enterprise consulting clients building or deploying AI systems for EU operations need the AI Act compliance programme this year. Here's the 10-week implementation playbook your team can ship in client engagements.

$199 one-time

Tailored to your situation. Access within 24 hours. 30-day money-back.

Includes a hand-built implementation playbook delivered alongside course access, generated for your specific situation.

Why this course

The EU AI Act (Regulation EU 2024/1689) is the world's first comprehensive AI regulation. It applies to providers placing AI systems on the EU market, deployers using AI systems in the EU, and (importantly) providers and deployers outside the EU whose AI-system output is used in the EU. This makes nearly every multinational client in scope.

The regulation operates on a risk-tier model: prohibited practices (Article 5, in force February 2025), high-risk systems with substantial governance obligations (Article 6-15, in force August 2026), general-purpose AI systems with transparency requirements (Article 51-55, in force August 2025), and limited-risk systems with disclosure obligations. Penalties reach EUR 35M or 7% of global annual turnover.

Enterprise consulting clients deploying AI for HR (high-risk under Annex III), credit-scoring (high-risk), critical infrastructure (high-risk), education (high-risk), law enforcement (high-risk), and many other use cases are in scope. The consulting engagement must include: AI-system inventory, risk-tier classification, governance framework, conformity assessment, technical documentation, deployer obligations, and post-market monitoring.

This course teaches you the implementation playbook your team ships to clients. Twelve modules, each ending with a deliverable artefact that becomes part of the client compliance pack. Plus a hand-built implementation playbook for your specific client engagement profile.

What you walk away with

A documented AI-system inventory framework for client engagements.
An Article 6 risk-tier classification methodology.
An Article 9 risk-management system template.
An Article 10 data-governance template for high-risk systems.
An Article 11 technical-documentation template.
An Article 13 transparency-and-information template.
An Article 14 human-oversight design template.
A 10-week implementation plan for client engagements.

The 12 modules

Module 1. EU AI Act regulatory landscape and scope

Detailed walkthrough of EU AI Act (EU 2024/1689) and the implementing-act-and-delegated-act schedule, scope determination (provider vs deployer vs importer vs distributor), extraterritorial reach (Article 2(1)(c)), proportionality assessment for SMEs, and the relationship to GDPR, NIS2, Product Liability Directive. How the requirements interact for a multinational client with EU operations.

Module 2. Prohibited AI practices (Article 5)

Article 5 prohibits specific AI practices: subliminal manipulation, exploitation of vulnerabilities, social scoring by public authorities, real-time remote biometric identification in public spaces (with exceptions), emotion recognition in workplaces and education, biometric categorisation by protected characteristics, predictive policing based on profiling. Build the prohibited-practices screen for client AI-system inventory. Deliverable: prohibited-practices screen and rejection workflow.

Module 3. High-risk system classification (Article 6 + Annex III)

Article 6 defines high-risk AI systems through two paths: integration into Annex I safety-regulation products, and use cases listed in Annex III (biometrics, critical infrastructure, education, employment, essential services, law enforcement, migration, justice, democratic process). Build the classification methodology with worked examples for HR (recruiting, performance evaluation, termination), credit scoring, healthcare-decision support. Deliverable: high-risk classification matrix.

Module 4. Article 9 risk-management system

High-risk AI providers must establish a risk-management system covering the entire AI-system lifecycle. Build the risk-management template: identification of foreseeable risks, estimation and evaluation, risk-treatment measures, residual-risk evaluation, integration with quality-management, and the post-market monitoring loop. Deliverable: risk-management system template.

Module 5. Article 10 data and data governance

Article 10 mandates training, validation, and testing data governance: relevance, representativeness, completeness, free-of-errors, appropriate-statistical-properties. Build the data-governance template: data-collection requirements, data-preparation requirements, bias-detection and mitigation, data-acceptable-use, and the data-retention model. Deliverable: data-governance template. Three worked examples drawn from real implementation packages plus the conversation-script for the next sponsor meeting that lands the artefact for review.

Module 6. Article 11 technical documentation

Article 11 + Annex IV mandate technical documentation: system description, design specifications, training methodology, validation and testing, monitoring, foreseen modifications. Build the technical-documentation pack template that meets Annex IV in full. The pack becomes part of conformity-assessment evidence. Deliverable: technical-documentation pack template.

Module 7. Article 12 record-keeping and Article 13 transparency

Article 12 requires automatic logging of AI-system operation; Article 13 requires transparency and information to deployers. Build the logging architecture (event types, retention, access controls) and the deployer-information document (instructions for use, intended purpose, performance characteristics, risk-management requirements). Deliverable: logging architecture spec and deployer-information template.

Module 8. Article 14 human oversight

Article 14 mandates human oversight of high-risk AI systems. Build the human-oversight design: oversight roles, control mechanisms (override, halt, correct, contest), interpretability requirements, and the operator-training requirement. Three worked examples (HR shortlisting, credit-scoring, medical-decision-support). Deliverable: human-oversight design template. Three worked examples drawn from real implementation packages plus the conversation-script for the next sponsor meeting that lands the artefact for review.

Module 9. Article 15 accuracy, robustness, cybersecurity

Article 15 requires high-risk systems to achieve appropriate accuracy, robustness, and cybersecurity throughout the lifecycle. Build the accuracy-robustness-cybersecurity framework: performance-metric definition and tracking, adversarial-robustness testing, drift-detection, model-versioning, and the cybersecurity overlay (NIS2, CRA-aligned). Deliverable: accuracy-robustness-cybersecurity framework. Three worked examples drawn from real implementation packages plus the conversation-script for the next sponsor meeting that lands the artefact for review.

Module 10. Conformity assessment and CE marking

High-risk AI systems must undergo conformity assessment before EU-market placement. Build the conformity-assessment workflow: assessment-route selection (internal vs notified-body), evidence pack assembly, declaration-of-conformity preparation, CE marking, and EU database registration. The assessment-and-registration sequence for client AI systems. Deliverable: conformity-assessment workflow.

Module 11. General-purpose AI models (GPAI) and large-scale models

Article 51-55 impose obligations on general-purpose AI models including transparency, copyright respect, and (for models with systemic risk) additional evaluations and risk-mitigation. Build the GPAI compliance overlay for clients integrating foundation models: model-provider engagement, transparency-information collection, copyright-policy alignment, and systemic-risk classification. Deliverable: GPAI overlay framework.

Module 12. Your 10-week client implementation plan

Week-by-week plan with weekly deliverables for client engagement. Weeks 1-2: client AI-system inventory + prohibited-practices screen. Weeks 3-4: risk-tier classification + risk-management system v1. Weeks 5-6: data-governance + technical-documentation pack. Weeks 7-8: logging architecture + human-oversight design + accuracy-robustness framework. Weeks 9-10: conformity-assessment workflow + GPAI overlay + final client deliverable pack. Deliverable: full client compliance pack.

How this addresses your situation

Specific modules that map to what you said you are dealing with.

Modules 1 to 3 cover the regulatory landscape, prohibited practices, and high-risk classification.

Modules 4 to 9 cover the Article 9-15 governance obligations for high-risk systems.

Modules 10 to 11 cover conformity assessment and GPAI overlay.

Module 12 covers the 10-week client implementation plan.

What you get with this course

The 12-module course delivered as text plus downloadable templates.
Templates for prohibited-practices screen, high-risk classification, risk-management system, data-governance, technical-documentation pack, logging architecture, deployer information, human-oversight design, accuracy-robustness framework, conformity-assessment workflow, GPAI overlay.
A hand-built implementation playbook generated for your specific client engagement profile.
Three worked examples of AI Act compliance packs at enterprise clients (HR, credit-scoring, healthcare).
Scripted talking points for the client legal-and-compliance engagement.

What you will have in hand by Day 1, Week 1, Month 1

Day 1: AI-system inventory framework adopted.

Week 2: First client AI inventory complete.

Week 4: Risk-management system v1 shipped to first client.

Week 6: Technical-documentation pack v1 delivered.

Week 10: Full client compliance pack delivered with conformity-assessment workflow.

Before and after

Before

Your firm has EU-exposed clients deploying AI. The AI Act compliance pack does not exist. Client engagements miss the regulatory requirements. Practice principal wants a compliance offering.

After

A documented AI Act compliance pack is shippable to client engagements. Article 6-15 templates are tailored. Conformity-assessment workflow is in place. The practice has a productised AI Act offering.

What happens if you do not address this

AI Act high-risk obligations land August 2026. Clients are now scoping compliance work. Consulting firms without a shippable AI Act compliance offering lose these engagements to firms that do.

Who it is for

For enterprise consulting engineers, technical leads, AI-implementation specialists, and consulting practice leaders shipping AI compliance work to EU-exposed clients.

Who this is NOT for. In-house teams (this is for consulting delivery). Clients with no EU exposure. Pure research roles.

How it arrives

Text-based course via LMS, plus downloadable templates and the hand-built implementation playbook.

Time investment. Roughly 16 hours of reading and 30 to 40 hours building the first client engagement pack.

Why $199 is the right number

External AI Act specialists charge $400K-$2M for client programmes. Big4 advisory engagement runs $500K-$3M. Specialist law firms charge $1000-$1500 per hour for AI Act work. $199 buys the focused playbook plus the implementation document for your client engagement profile.

FAQ

Will this replace hiring an AI Act specialist?

Partially. It teaches you the implementation playbook your team ships. You may still want legal counsel for ambiguous classification calls and notified-body engagement.

What if my client is a deployer (not provider) of AI systems?

Module 7 covers deployer-specific obligations from Article 26-29.

Does this cover the AI Liability Directive and Product Liability Directive overlap?

Module 1 covers the framework boundaries. Liability-Directive details warrant a separate engagement.

What about UK and US AI governance (Executive Order, NIST AI RMF)?

Module 11 covers the cross-framework alignment for multinational AI systems.

What is in the implementation playbook for me specifically?

An AI-system inventory framework tailored to your typical client engagement; a risk-tier classification matrix; a 10-week client delivery plan.

30-day money-back guarantee. If after a week of working through the materials this is not what you needed, reply to the receipt email and a full refund is processed. No questions, no forms.

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.