Why This Workshop Matters
Management systems enable organisations to develop and deploy AI responsibly, achieving business goals while meeting regulatory obligations under POPIA, King V principles of ethical leadership and technology governance, and the expectations of stakeholders, including the Information Regulator.
This course provides a clear understanding of the scope and practical measures required to build and operate trustworthy AI systems, while seamlessly integrating the AI management system into existing organisational structures, risk frameworks, and management processes.
WHAT YOU WILL LEARN
Management practices for developing and operating trustworthy AI in the South African context:
- Scope of an artificial intelligence management system
- Providing leadership and demonstrating commitment (King V alignment)
- Organisational roles, responsibilities and authorities for AI systems
- Resources, competence and awareness to support AI systems
- Mapping of ISO 42001 AI management system to POPIA, King V and the draft National AI Policy
- Operational planning and control, risk assessment and treatment (including AI-specific risks such as bias, opacity and third-party dependencies)
- Monitoring, measurement, analysis and evaluation of AI systems
- Reacting to nonconformity and enabling continual improvement
This two-day deep-dive addresses the requirements of POPIA, King V, ISO 42001, and the draft National AI Policy for:
- AI system risk classification and categorisation
- AI policies and ethical guidelines
- Risk management system (including impact assessments)
- Quality management system for AI compliance
- Data protection impact assessments (aligned with POPIA)
- AI system life cycle controls
- Data governance and controls for AI (POPIA's eight conditions for lawful processing)
- Technical documentation for AI systems
- Record-keeping and accountability
- Provision of information to users and data subjects (transparency and explainability)
- Human oversight and meaningful human intervention
- Accuracy, robustness, cybersecurity and fairness
- Control of third parties and supply chain risk
- Compliance assessments and assurance processes
Participants will learn about:
Plan - Provide management direction and board-level support for the AI management system, including establishing the AI policy, defining roles and responsibilities, and ensuring the necessary resources are available.
Operate - Use AI responsibly by implementing the planned processes, applying risk controls, managing the AI system lifecycle, and ensuring data governance and human oversight.
Evaluate - Monitor and measure adherence to organisational and AI policies, performance of the AI management system, and effectiveness of controls through audits, reviews and metrics.
Improve - Continually improve the suitability, adequacy and effectiveness of the AI management system by addressing nonconformities, implementing corrective actions and driving ongoing enhancement.
WHO SHOULD DO THIS COURSE?
- AI providers, developers, designers and operators
- IT and digital transformation managers
- Data Protection / Information Officers (DPOs / IOs)
- Internal auditors and assurance professionals
- Governance, risk and compliance (GRC) managers
- Compliance and legal officers
- Risk managers
- Information security managers
- Board members and executives seeking to fulfil King V responsibilities
- Consultants advising on responsible AI
On completion of this course participants will be able to:
- Articulate the requirements of an effective artificial intelligence management system in the South African context.
- Design, develop, implement, maintain, continually improve, and document an AI management system aligned with ISO 42001, POPIA, King V, and the National AI Policy.
- Identify required processes, their interactions, and practical operationalisation.
- Clarify roles, responsibilities, and accountabilities for AI systems (including board oversight).
- Integrate, operate, and monitor key practices that support ethical, lawful, and trustworthy AI.
- Ensure the AI management system addresses both mandatory obligations (e.g., POPIA) and voluntary best practices for responsible innovation.