Description

A focused course, tailored for you

OMB M-24-10 AI Use Inventory and Governance Programme for Federal Civilian

Build the OMB M-24-10 AI use inventory and governance programme from scratch in 8 weeks. Plus OMB M-24-21 procurement overlay.

OMB Memorandum M-24-10 mandates federal agencies build comprehensive AI use inventories, designate Chief AI Officers, manage AI risks, and implement minimum practices for safety-impacting and rights-impacting AI by December 2025. Federal civilian agencies and the contractors supporting them need the implementation programme this year. Here's the 8-week build.

$199 one-time

Tailored to your situation. Access within 24 hours. 30-day money-back.

Includes a hand-built implementation playbook delivered alongside course access, generated for your specific situation.

Why this course

OMB Memorandum M-24-10 (Advancing Governance, Innovation, and Risk Management for Agency Use of Artificial Intelligence) plus the companion M-24-21 (Advancing the Responsible Acquisition of Artificial Intelligence in Government) created the most comprehensive federal AI governance framework to date. Agencies must: designate Chief AI Officers and establish AI Governance Boards; build comprehensive AI use case inventories per Executive Order 13960 and M-24-10 Section 3; implement minimum risk-management practices for safety-impacting and rights-impacting AI per Section 5; ensure adequate AI training; report annually on AI use; and integrate AI risk management with existing risk frameworks (NIST AI RMF, NIST SP 800-37).

Contractors supporting federal civilian agencies (HHS, DOL, ED, Treasury, VA, USDA, DOC, SSA, DOJ, DHS components) carry significant implementation burden: building the inventory taxonomy, running the risk-determination workflow, implementing the minimum practices for safety/rights-impacting systems, and integrating with FedRAMP, NIST RMF, and agency-specific frameworks.

This course teaches the implementation programme: AI use case inventory taxonomy, risk-determination workflow per M-24-10 Section 5, minimum-practices implementation, CAIO support model, AI governance board engagement, and the procurement overlay per M-24-21. Twelve modules, each ending with a deliverable artefact. Plus a hand-built implementation playbook for your agency engagement profile.

What you walk away with

A documented AI use case inventory taxonomy aligned to M-24-10.
A risk-determination workflow per Section 5 (safety-impacting + rights-impacting).
Minimum-practices implementation templates per Section 5(c).
A Chief AI Officer support model.
An AI Governance Board engagement protocol.
Integration with NIST AI RMF and NIST SP 800-37 RMF.
An 8-week implementation plan.

The 12 modules

Module 1. M-24-10 regulatory landscape and scope

Detailed walkthrough of OMB M-24-10, M-24-21, EO 13960, AI Bill of Rights, NIST AI RMF 1.0, and the relationship to FedRAMP, NIST SP 800-37 RMF, and agency-specific AI guidance. Compliance deadlines (December 2024 minimum practices for existing systems; December 2025 expanded requirements). Scope determination for federal civilian agencies and the contractors supporting them.

Module 2. AI use case inventory taxonomy

Build the AI use case inventory taxonomy: use-case definition (single-purpose vs platform), categorisation (safety-impacting, rights-impacting, neither, both), system-attribute capture (purpose, data, model, integration, deployer, vendor), and the public-disclosure-fit determination. Three worked examples from EO 13960 inventories at major civilian agencies. Deliverable: AI inventory taxonomy and template.

Module 3. Risk-determination workflow

Build the risk-determination workflow per M-24-10 Section 5(b): safety-impacting determination criteria (loss of life, serious injury, damage to critical infrastructure), rights-impacting determination criteria (impact on civil rights, civil liberties, privacy, equal opportunity), waiver-and-extension process, and the documentation requirement. The risk-determination decision-tree document. Deliverable: risk-determination workflow document.

Module 4. Minimum practices for safety-impacting AI

Build the minimum-practices implementation for safety-impacting AI per Section 5(c)(iv): pre-deployment testing, AI impact assessment, ongoing performance monitoring, human-decision tier-down, public consultation, and the consequence-management protocol. Three worked examples (autonomous-vehicle decision support, infrastructure-management AI, medical-device-adjacent AI). Deliverable: safety-impacting minimum-practices template.

Module 5. Minimum practices for rights-impacting AI

Build the minimum-practices implementation for rights-impacting AI per Section 5(c)(v): pre-deployment testing for disparate-impact, AI impact assessment, equity-and-fairness analysis, ongoing performance monitoring, notice-and-explanation requirements, opt-out option, and the consequence-management protocol. Three worked examples (benefits-determination AI, employment-decision AI, law-enforcement-decision AI). Deliverable: rights-impacting minimum-practices template.

Module 6. Chief AI Officer support model

Build the CAIO support model: CAIO designation memorandum, charter and authority document, governance-board interaction, AI strategy coordination, AI use case inventory ownership, AI risk-management oversight, and the executive-reporting cadence. The CAIO is the central accountability point; the support model is what makes the role functional. Deliverable: CAIO support model document.

Module 7. AI Governance Board engagement

Build the AI Governance Board engagement protocol: board composition (CIO, CDO, CISO, CAIO, agency civil rights officer, agency procurement officer), board mandate document, meeting cadence and agenda, decision-rights matrix, escalation protocol from technical to board, and the board reporting template. How to position the board as forward-looking rather than reactive. Deliverable: AI Governance Board engagement playbook.

Module 8. NIST AI RMF integration

Integrate M-24-10 implementation with NIST AI RMF 1.0 (Govern, Map, Measure, Manage): RMF function-to-M-24-10-section mapping, RMF playbook usage, AI RMF profile development for agency context, and the integration with NIST AI 600-1 (generative AI profile). The NIST framework provides the operational backbone; M-24-10 provides the federal-specific overlay. Deliverable: NIST AI RMF integration document.

Module 9. NIST SP 800-37 RMF and FedRAMP integration

Integrate M-24-10 with existing FISMA risk-management: NIST SP 800-37 RMF step alignment, ATO process integration, FedRAMP authorization overlap, system-security-plan AI-augmentation, and the continuous-monitoring AI overlay. The AI inventory and risk determinations are inputs to the ATO authorization decision. Deliverable: NIST RMF integration document.

Module 10. OMB M-24-21 procurement overlay

M-24-21 mandates responsible AI acquisition: contract clauses requiring AI risk information disclosure, vendor responsible-AI capabilities assessment, AI-system-bill-of-materials requirement, conformance with NIST AI RMF, vendor-management framework. Build the procurement overlay: contract-clause library, vendor-assessment framework, AI-system-BOM template, and the post-award monitoring. Deliverable: procurement overlay document.

Module 11. Public AI use case inventory and reporting

Build the public reporting workflow per Section 6: annual AI use case inventory submission, public website disclosure (subject to redaction for safety/security), updates and corrections process, and the public-engagement model for high-profile use cases. The reporting cadence and quality determine agency credibility. Deliverable: public reporting workflow.

Module 12. Your 8-week implementation plan

Week-by-week plan with weekly deliverables. Weeks 1-2: AI inventory taxonomy + first-pass inventory. Weeks 3-4: risk-determination workflow + first-pass risk determinations. Weeks 5-6: minimum-practices templates + first implementation. Weeks 7-8: CAIO support model + AI Governance Board engagement + NIST RMF integration + procurement overlay + public reporting workflow. Deliverable: full implementation pack.

How this addresses your situation

Specific modules that map to what you said you are dealing with.

Modules 1 to 5 cover the regulatory landscape, inventory taxonomy, risk determination, and minimum practices.

Modules 6 to 10 cover CAIO, governance board, NIST integration, and procurement overlay.

Modules 11 to 12 cover public reporting and the 8-week implementation plan.

What you get with this course

The 12-module course delivered as text plus downloadable templates.
Templates for AI inventory taxonomy, risk-determination workflow, minimum-practices (safety + rights), CAIO support model, AI Governance Board, NIST AI RMF integration, NIST SP 800-37 RMF integration, M-24-21 procurement overlay, public reporting workflow.
A hand-built implementation playbook generated for your specific agency engagement profile.
Three worked examples of M-24-10 implementations at major federal civilian agencies.
Scripted talking points for AI Governance Board engagement.

What you will have in hand by Day 1, Week 1, Month 1

Day 1: AI inventory taxonomy adopted.

Week 2: First agency inventory drafted.

Week 4: First risk determinations completed.

Week 6: Minimum-practices templates delivered.

Week 8: Full implementation pack delivered.

Before and after

Before

Your firm supports federal civilian agencies. M-24-10 compliance work is on the project pipeline. The implementation pack does not exist. Agency CAIO is asking for support.

After

A documented M-24-10 implementation pack is shippable to agency engagement. AI inventory taxonomy and risk determinations are tailored. Minimum-practices templates are ready. CAIO support model is in place. AI Governance Board engagement is documented.

What happens if you do not address this

M-24-10 minimum-practices deadline was December 2024; expanded requirements landed December 2025. Agencies in backlog are visible in public reporting and Inspector General reviews.

Who it is for

For federal civilian consultants, technical leads, AI/data leads, FedRAMP programme owners, and agency engagement leads supporting M-24-10 compliance work.

Who this is NOT for. Pure commercial-customer firms. Firms with no federal agency engagements. Pure research roles.

How it arrives

Text-based course via LMS, plus downloadable templates and the hand-built implementation playbook.

Time investment. Roughly 16 hours of reading and 35 to 50 hours building the first agency engagement deliverable.

Why $199 is the right number

External M-24-10 specialists charge $300K-$1M for agency programmes. Big4 federal AI advisory engagement runs $500K-$2M. $199 buys the focused playbook plus the implementation document for your specific agency engagement profile.

FAQ

Will this replace hiring an M-24-10 specialist?

Partially. It teaches you the implementation pack. You may still want specialist support for ambiguous risk-determination calls.

What if my agency has agency-specific AI guidance (HHS, DOJ, DHS)?

Module 1 covers agency-specific overlay mapping.

Does this cover DOD AI governance (not bound by M-24-10)?

Module 1 covers DOD AI 6000 series guidance as adjacent framework.

What about EU AI Act overlap for agencies with EU exposure (e.g., commerce)?

Module 10 covers EU AI Act procurement implications.

What is in the implementation playbook for me specifically?

An AI inventory taxonomy tailored to your typical agency engagement; a risk-determination workflow; an 8-week build plan.

30-day money-back guarantee. If after a week of working through the materials this is not what you needed, reply to the receipt email and a full refund is processed. No questions, no forms.

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.