Controls testing
What does controls testing cover in AI governance?
2 competencies are filed under it: Control design and operating-effectiveness testing, AI audit and independent assurance. Each has its own page saying what it means in practice.
The competencies filed under it
- Control design and operating-effectiveness testing
Maps risks to preventive, detective and corrective controls, then tests design and operation with samples, evidence and defensible findings.
Risk and Assurance
- AI audit and independent assurance
Scopes an AI audit, sets criteria, samples, interviews, tests, writes findings with condition, criteria, cause, effect and recommendation, and tracks remediation.
Risk and Assurance
Roles that ask for it
- AI Auditor2 of 2 competencies
- Chief Audit Executive, AI audit edition2 of 2 competencies
- AI Controls Analyst1 of 2 competency
- Compliance Analyst1 of 2 competency
- Cybersecurity Risk Analyst1 of 2 competency
- GRC Associate (AI)1 of 2 competency
- AI Compliance Manager1 of 2 competency
- AI Compliance Specialist1 of 2 competency
- AI Governance Engineer1 of 2 competency
- AI Risk Manager1 of 2 competency
- Security Compliance Manager1 of 2 competency
- Physical AI Safety Engineer, autonomous systems edition1 of 2 competency
- Senior AI Compliance Analyst1 of 2 competency
Where it is taught and graded
35 graded topics, each passed by explaining it back. The first module of every program is free with a free account.
- Module 1: Integrated Governance, Risk and Compliance and Enterprise Context (1)
- Module 3: Ethics, Culture, Conduct, and Accountability (1)
- Module 7: Internal Control Architecture and Control Engineering (7)
- Module 8: Compliance Management Systems and Regulatory Intelligence (1)
- Module 15: Internal Audit, Assurance, and Evidence (7)
- Module 16: Findings, Issues, Root Cause, and Remediation (1)
- Module 17: AI Governance, AI Risk, AI Security, and AI Assurance (1)
- Module 18: Governance, Risk and Compliance Technology, Automation, and Evidence Engineering (1)
- Module 3: Bounding by Design (1)
- Module 6: Testing and Red-Teaming (2)
- Module 8: Multi-Agent Governance (1)
- Module 11: The Capstone: Deploy and Defend (1)
- Module 7: Agents Under Command (1)
- Module 10: Evidence Engineering (2)
- Module 13: The Capstone: The Board Audit and Viva (1)
- Module 3: Generative AI Compliance (1)
- Module 4: AI Content Labeling (1)
- Module 6: Ethics Review (1)
- Module 5: Poison, Leaks, and the Adversary (1)
- Module 14: The Estate Audit (1)
- Module 9: Capstone: The Compliance Portfolio (1)
Questions
- What does controls testing cover in AI governance?
- 2 competencies are filed under it: Control design and operating-effectiveness testing, AI audit and independent assurance. Each has its own page saying what it means in practice.
- Which roles ask for controls testing?
- 13 roles on the map name at least one of its competencies, from analyst seats to executive ones. Each role page lists the depth expected.
- Where is controls testing taught and graded?
- 35 graded topics teach it across 6 programs. Each topic is graded by explaining it back against its own transcript, so a pass is evidence, not attendance. The first module of every program is free with a free account.