AI Literacy for Regulated Firms
Article 4 of the EU AI Act, translated into what your staff must actually know
For firms under AI Act, DORA, and financial-services obligations
Prove your people are competent — not just that they clicked through a course.
Role-mapped training with tamper-evident records, CPD credit, and an evidence pack your auditor accepts without a follow-up meeting.
- Verifiable certificates
- Assign by group and path
- Evidence export for auditors
Browse by category
AI governance
Literacy, oversight, and the evidence an AI Act auditor asks for.
2 courses · AI literacy · Model assurance
Cyber security
Awareness that changes behaviour, and response that survives the first hour.
2 courses · Security awareness · Incident response
Data protection
GDPR in the day job: lawful basis, transfers, and what to do at 2am.
2 courses · GDPR essentials · International transfers
Financial crime
Money laundering, sanctions, and fraud — the training a supervisor tests.
3 courses · AML and CTF · Sanctions · Fraud prevention
Leadership and conduct
What the senior manager regime expects of the people who sign things.
2 courses · Conduct and culture · Board effectiveness
Operational resilience
DORA, ICT third-party risk, and testing that the plan survives contact.
3 courses · ICT risk · Incident reporting
Recently published
The most recent additions to the catalogue.
Internal Audit in the Age of AI
Auditing model-driven processes without pretending to be a data scientist
DORA Operational Resilience Essentials
ICT risk, third-party registers, and what your board is now accountable for
Third-Party Risk Registers That Survive an Inspection
What goes in the register, who owns it, and how it is kept true
AI governance
Literacy, oversight, and the evidence an AI Act auditor asks for.
AI Literacy for Regulated Firms
Article 4 of the EU AI Act, translated into what your staff must actually know
Internal Audit in the Age of AI
Auditing model-driven processes without pretending to be a data scientist
Cyber security
Awareness that changes behaviour, and response that survives the first hour.
Security Awareness That Changes Behaviour
Phishing, pretexting, and why annual click-through training does nothing
The First Hour of an Incident
Triage, evidence, and communications while everything is still unclear
Data protection
GDPR in the day job: lawful basis, transfers, and what to do at 2am.
GDPR for People With a Day Job
Lawful basis, subject rights, and what to do in the first hour of a breach
International Data Transfers After Schrems II
Standard clauses, transfer impact assessments, and honest supplementary measures
Financial crime
Money laundering, sanctions, and fraud — the training a supervisor tests.
Anti-Money Laundering Fundamentals
Customer due diligence, suspicious activity, and the report you must not tip off
Sanctions Screening in Practice
Lists, false positives, and the escalation nobody wants to make
Spotting Payment Fraud
Invoice redirection, authorised push payments, and the call that is not the CFO
For organisations
Train a team, and be able to prove it
Seats on a plan, courses assigned to groups and paths, and content our educators build for your organisation alone. Billed per seat by invoice, on our schedule.
Already have an account? Sign in