AI Risk Management (NIST AI RMF) Fundamentals Training
A one-day fundamentals programme on NIST AI RMF. Learn how organisations identify, assess and reduce risks from AI systems using the NIST AI Risk Management Framework. Participants work through practical examples and a guided case before drafting actions for their own organisation.
Who should attend: AI owners, product teams, risk, compliance, privacy and technology managers. No prior framework knowledge is required.
HRD Corp claim support available
Programme Agenda
9:00 AM to 10:00 AM
AI Risk and Trustworthiness
Introduce the AI RMF's purpose and characteristics of trustworthy AI. Explore how reliability, safety, security, transparency, privacy and fairness can create practical trade-offs in a business use case.
10:00 AM to 10:15 AM
Break
10:15 AM to 11:30 AM
Govern
Assign oversight, policies, responsibilities and risk escalation. Identify whose approval is needed, who can stop a system and how vendor-provided AI fits within organisational accountability.
11:30 AM to 12:30 PM
Map
Describe intended use, users, affected people, system boundaries and dependencies. Identify risks that change with deployment context rather than relying only on a model supplier's general statements.
12:30 PM to 1:30 PM
Lunch
1:30 PM to 2:45 PM
Measure
Choose evaluation questions and suitable evidence for performance, harmful outputs, privacy and fairness. Distinguish a metric from an acceptable-risk decision and explain the limits of a small test sample.
2:45 PM to 3:00 PM
Break
3:00 PM to 4:00 PM
Manage
Prioritise risks, select treatments, record residual risk and plan monitoring. Define triggers for escalation, reassessment or withdrawal when the system, data or operating context changes.
4:00 PM to 5:00 PM
Practical Exercise: An AI Risk Profile
Assess a fictional recruitment assistant using Govern, Map, Measure and Manage. Draft four risk statements, propose evaluations and decide which risks need treatment before release.
Key Outcomes
- Explain Govern, Map, Measure and Manage
- Identify contextual AI risks and affected people
- Choose basic evaluations and treatments
- Record residual risk and monitoring responsibilities
Training Mode Physical / Online / Hybrid
HRD Corp Subject to programme eligibility and HRD Corp approval
Level Fundamentals / Beginner. No prior framework knowledge required.
Duration 1 Day | 9:00 AM to 5:00 PM (6.5 learning hours, excluding breaks)
Venue In-house at the client's premises, or delivered via the client's preferred platform (Microsoft Teams, Zoom, or equivalent)
Assessment Group case exercise and a 10-question knowledge check
Certificate Orbix Certificate of Completion upon full attendance; not a professional certification
Malaysia Relevance
High relevance for Malaysian AI adopters needing a common language across business, risk and technology teams. The voluntary framework can support local governance arrangements while legal applicability is assessed separately.
Practical Takeaways
An AI use-case risk profile and evaluation-and-treatment worksheet.
Download a sample practice worksheet (TXT). This fictional exercise is a preview of the learning approach. About Orbix; contact us to confirm the facilitator and relevant experience for your delivery.
Course Completion and Next Steps
Participants receive an Orbix Certificate of Completion upon full attendance. This introductory course does not confer professional certification or establish an organisation's compliance. Further implementation and assessment depend on the organisation's scope and obligations.
Frequently Asked Questions
Related Fundamentals Training
Risk Management (ISO 31000) Fundamentals Business Continuity Management (ISO 22301) Fundamentals AI Governance & Management (ISO/IEC 42001) Fundamentals Compliance Management (ISO 37301) Fundamentals View all fundamentals programmes
Reference material: NIST: AI Risk Management Framework.