Course : Mapping and Evaluating AI Uses in Accordance with the AI ActIdentify use cases, assess risks, and prioritize your compliance efforts
Practical course - 2d
- 14h00 - Ref. RIR
|
Download in PDF format
Share this course by email
 | Identify current or planned use cases for artificial intelligence within your organization |
| Classify AI systems according to the risk categories defined by the AI Act |
| Analyze the regulatory, organizational, and business impacts associated with each use case |
| Prioritize compliance efforts based on the organization's risks and challenges |
| Developing a map of AI uses that can be used as a governance tool |
Intended audience
Compliance officers, legal counsel, DPOs, risk managers, quality managers, CISOs, transformation managers, AI project managers, innovation managers, business unit managers, members of IT, digital, or organizational leadership teams, and anyone involved in the deployment or governance of artificial intelligence systems.
Prerequisites
None
Practical details
A combination of methodological guidance, examples drawn from professional situations, and discussions based on shared experiences. Presentation of the applicable provisions of the AI Act and their operational implications. Use of risk assessment grids, sample inventory forms, prioritization matrices, and examples of AI system registries. Sector-specific case studies (HR, finance, manufacturing, healthcare, public sector, services). Interactive quizzes, individual assignments, workshops in pairs and small groups, group presentations, and debriefings.
Course schedule
1 Understanding the AI Risk Classification Framework
- Understanding the Objectives and Rationale of the European AI Act
- Distinguish between the concepts of an AI system, a generative AI model, agent-based AI, and automation
- Identify the four risk levels defined by the AI Act: unacceptable risk, high risk, limited risk, and minimal risk
- Differentiate the applicable requirements based on risk categories
- Integrating the mapping of AI uses into a comprehensive AI governance framework
Hands-on work
Interactive quiz designed to help participants distinguish between different digital systems (AI, automation, RPA, rule engines, generative AI). Group analysis of about 15 use cases from various sectors (HR, finance, healthcare, manufacturing, the public sector, and customer relations). Working in small groups, participants provide an initial assessment of the risk level and then compare their analyses with the requirements of the AI Act during a debriefing led by the trainer.
2 Mapping Your Organization's AI Use Cases
- Identify the declared, emerging, and informal uses of AI in various professions
- Structuring a data collection process with management and teams
- Describe each use case using a standardized template: purpose, users, data, tools, providers, beneficiaries
- Identify sensitive data, automated processing, and AI-assisted decisions
- Build a usable map for compliance, IT, CISO, and business teams
Hands-on work
Using a sample inventory form, each participant compiles a list of use cases for their organization or for a provided case study. Participants work in pairs to fill in missing information, then pool their findings to identify challenges encountered during the inventory process (Shadow AI, personal use, SaaS tools, unreported experiments). The group collaboratively develops a mapping template that can be reused within the company.
3 Assess risk levels and analyze impacts
- Assess the level of regulatory risk for each use case
- Identify the criteria that influence classification: purpose, area of application, type of decision, level of autonomy, data used
- Analyze legal, ethical, organizational, reputational, and operational risks
- Identify additional obligations related to the GDPR, cybersecurity, and data governance
- Develop a multi-criteria analysis framework to facilitate prioritization
Hands-on work
Red Thread Case Study. In groups of three or four participants, participants will conduct a detailed analysis of approximately ten AI use cases belonging to a fictional organization. Participants complete a risk assessment matrix and then present their decisions to the entire group. Group discussion on borderline cases and differences in interpretation to develop a consistent approach to classification.
4 Prioritize actions and develop a roadmap
- Identify use cases that require priority action
- Define appropriate governance measures based on the level of risk
- Identify the documents and evidence to be submitted to demonstrate compliance
- Organize the monitoring of AI usage over time using metrics and a registry of AI systems
- Develop a roadmap for compliance and governance
Hands-on work
Based on the mapping exercise conducted earlier, participants individually develop a prioritization matrix that cross-references risk level, business criticality, and organizational maturity. In workshops, they develop an initial roadmap outlining short-, medium-, and long-term actions: additional inventory, classification, governance, awareness-raising, documentation, supplier oversight, and monitoring. The session concludes with a group review featuring an exchange of best practices and recommendations from the trainer.
5 Implement a sustainable approach to mapping and reviewing land uses
- Define the roles of the various stakeholders in maintaining the map
- Integrate the mapping of AI use cases into existing business processes
- Organize periodic reviews and updates of the registry
- Raise awareness among business units about reporting new uses and managing Shadow AI
- Preparing the Next Steps Toward Comprehensive AI Governance
Hands-on work
Group role-playing exercise simulating an AI governance committee. Each group represents a department (legal, business units, IT, CISO, compliance, HR) and must decide how to integrate new use cases into the use case map. Participants collectively define responsibilities, validation criteria, and the periodic review process. The training concludes with the development of an individual action plan outlining the first steps to be taken within their organization.
PARTICIPANTS
Compliance officers, legal counsel, DPOs, risk managers, quality managers, CISOs, transformation managers, AI project managers, innovation managers, business unit managers, members of IT, digital, or organizational leadership teams, and anyone involved in the deployment or governance of artificial intelligence systems.
PREREQUISITES
None
TRAINER QUALIFICATIONS
The experts leading the training are specialists in the covered subjects. They have been approved by our instructional teams for both their professional knowledge and their teaching ability, for each course they teach. They have at least five to ten years of experience in their field and hold (or have held) decision-making positions in companies.
ASSESSMENT TERMS
The trainer evaluates each participant’s academic progress throughout the training using multiple choice, scenarios, hands-on work and more.
Participants also complete a placement test before and after the course to measure the skills they’ve developed.
TERMS AND DEADLINES
Registration must be completed 24 hours before the start of the training.
ACCESSIBILITY FOR PEOPLE WITH DISABILITIES
Do you need special accessibility accommodations? Contact Mrs. Fosse, Disability Manager, at psh-accueil@orsys.fr to review your request and its feasibility.
Compliance officers, legal counsel, DPOs, risk managers, quality managers, CISOs, transformation managers, AI project managers, innovation managers, business unit managers, members of IT, digital, or organizational leadership teams, and anyone involved in the deployment or governance of artificial intelligence systems.
PREREQUISITES
None
TRAINER QUALIFICATIONS
The experts leading the training are specialists in the covered subjects. They have been approved by our instructional teams for both their professional knowledge and their teaching ability, for each course they teach. They have at least five to ten years of experience in their field and hold (or have held) decision-making positions in companies.
ASSESSMENT TERMS
The trainer evaluates each participant’s academic progress throughout the training using multiple choice, scenarios, hands-on work and more.
Participants also complete a placement test before and after the course to measure the skills they’ve developed.
TEACHING AIDS AND TECHNICAL RESOURCES
• The main teaching aids and instructional methods used in the training are audiovisual aids, documentation and course material, hands-on application exercises and corrected exercises for practical training courses, case studies and coverage of real cases for training seminars.
• At the end of each course or seminar, ORSYS provides participants with a course evaluation questionnaire that is analysed by our instructional teams.
• A check-in sheet for each half-day of attendance is provided at the end of the training, along with a course completion certificate if the trainee attended the entire session.
• The main teaching aids and instructional methods used in the training are audiovisual aids, documentation and course material, hands-on application exercises and corrected exercises for practical training courses, case studies and coverage of real cases for training seminars.
• At the end of each course or seminar, ORSYS provides participants with a course evaluation questionnaire that is analysed by our instructional teams.
• A check-in sheet for each half-day of attendance is provided at the end of the training, along with a course completion certificate if the trainee attended the entire session.
TERMS AND DEADLINES
Registration must be completed 24 hours before the start of the training.
ACCESSIBILITY FOR PEOPLE WITH DISABILITIES
Do you need special accessibility accommodations? Contact Mrs. Fosse, Disability Manager, at psh-accueil@orsys.fr to review your request and its feasibility.
This programme is an original creation, developed by the teaching teams at ORSYS Formation. Any reproduction, representation, adaptation or use, in whole or in part, without the prior written authorisation of ORSYS, is strictly prohibited. ORSYS reserves the right to take any action necessary to protect its intellectual property rights.
Dates and locations
Dernières places
Date garantie en présentiel ou à distance
Session garantie
This programme is an original creation, developed by the teaching teams at ORSYS Formation. Any reproduction, representation, adaptation or use, in whole or in part, without the prior written authorisation of ORSYS, is strictly prohibited. ORSYS reserves the right to take any action necessary to protect its intellectual property rights.