Agentic AI Governance for GRC & Cybersecurity

François B. Arthanas

Founder, CyberProsAI · CISSP, CISA, AIGP

Become the person your company trusts to sign off on AI agents. In 6 weeks.

Your company is putting AI agents to work. Someone has to decide what each one may do, and what evidence is enough to let it go live.

If nobody owns that where you work, it can be you.

In six live weeks, you practice making that call in hands-on labs, then defend your own decision at Demo Day.

Jan 12 cohort: 30 seats. First 10 to enroll get a 20-minute 1:1 call with me. Paying yourself? Save $500 with code KNOW-YOUR-AGENTS.

📚 View the syllabus here

Your enrollment includes:

  • Your own VerifyWise workspace to connect agent risks, controls & evidence.

  • 12 live classes and 6 office hours for questions and feedback.

  • Guided labs to test approval limits, challenge vendor claims, and investigate a simulated incident.

  • A governance portfolio and decision memo supporting your Go, Conditional Go, or No-Go recommendation.

  • Lifetime access to recordings, lab guides, and templates.

Bring your portfolio to your next interview or use it as a starting point for an AI review at work.

⭐ Rated 5.0 by alumni.

For GRC, security, and audit pros. No coding required. Up to 24 CPE.

Two-Week Test Drive: Take the first 4 live classes. Not worth it? Full refund through Jan 24. Next cohort isn't until April.

What you’ll learn

By the end of the course, you’ll be able to assess an AI agent, test its controls, and defend a deployment recommendation with evidence.

  • Build an agent inventory in VerifyWise showing what each agent does, what it can access, and who owns it.

  • Create an AI policy with testable requirements for authority limits, human approval, and shutdown.

  • Apply ISO/IEC 42001 to define who approves deployment, accepts risk, and can stop an agent.

  • Map an agent’s tools, data, dependencies, and trust boundaries to identify where it could cause harm.

  • Use the EU AI Act to assess classification and obligations, and NIST AI RMF to prioritize risk treatment.

  • Build a threat model with MITRE ATLAS and turn findings into risk treatments with named owners.

  • Define what an agent may read, change, send, or spend and which actions require human approval.

  • Configure authority limits and an approval gate in Dify, then test whether unauthorized actions are blocked.

  • Inspect traces in Opik to verify control behavior and identify where human oversight can fail.

  • Assess supplier claims and identify evidence gaps that could affect your deployment recommendation.

  • Run agent evaluations, compare automated judgments with human review, and investigate disagreements.

  • Explain what test results demonstrate, what they miss, and whether the evidence supports release.

  • Define rollout conditions, monitoring thresholds, and who must act when an agent exceeds its limits.

  • Test a model or workflow change and use regression results to decide whether it should proceed.

  • Investigate a simulated compromise, document containment, and set conditions for safe recovery.

  • Choose an agent scenario or bring an approved workplace use case for your individual capstone.

  • Assemble risks, controls, test evidence, and operating conditions into a reusable governance package.

  • Present your Go, Conditional Go, or No-Go recommendation at Demo Day and defend it with evidence.

Learn directly from François

François B. Arthanas

François B. Arthanas

I Train GRC & Cyber Pros to GOVERN AI Agents | Ph.D. Candidate, Cyber Defense

Cyber Pros Training
Centene
ISACA
Trenton Health Team
Western Governors University
See all products from François B. Arthanas

Who this course is for

  • GRC, risk, audit, privacy, and compliance professionals who need to assess AI agents and defend deployment decisions.

  • Cybersecurity professionals who need to test agent permissions, investigate failures, and verify controls before and after deployment.

  • Working professionals moving into AI governance who want to become the AI governance lead where they already work.

Prerequisites

  • The Only Prerequisite

    A willingness to learn how to Govern AI Agents. Basic familiarity with GRC, cybersecurity, audit, privacy or risk work would be nice to have

  • No coding or prior AI experience required

    Session 1 explains how AI agents work, what makes them different from other automation, and where governance fits.

What's included

François B. Arthanas

Live sessions

Learn directly from François B. Arthanas in a real-time, interactive format.

12 live classes over 6 weeks

Two 90-minute classes each week (18 hours), with demonstrations, practical scenarios, breakout discussions, and time to work through governance decisions.

6 office hours and capstone support

A weekly 60-minute session for questions and feedback. Week 4 includes the Capstone Brainstorming Workshop and capstone sign-up; Week 6 includes a final clinic before Demo Day.

Hands-on labs with solution walkthroughs

Hands-on labs across Weeks 1–5. Each has step-by-step instructions, a chaptered solution walkthrough video, and a submission with feedback.

A capstone you defend at Demo Day

Assemble your evidence into one governance package and a two-page decision memo, then present and defend your Go, Conditional Go, or No-Go decision at Demo Day, with peer and instructor feedback along the way.

Verifiable certificate and 24 CPE

Earn your Certificate of Completion by completing the labs, passing the capstone, and meeting participation requirements. It carries 24 CPE (18 hours of live classes plus 6 hours of office hours) for ISACA, ISC2, CompTIA, and IAPP renewals, subject to each body's rules.

Your VerifyWise Agentic AI Governance Workspace

Use your own workspace during the cohort to connect agent records, owners, risks, controls, suppliers, and evidence.

Weekly toolkits and lifetime access

A toolkit of working templates each week: policies, impact assessment, vendor questionnaire, deployment checklist, incident runbook and executive report. Plus lifetime access to recordings, slides and lab guides.

Retake a future cohort for free

Want another pass? Join a future cohort again at no cost, space permitting.

Maven Guarantee

Your purchase is backed by the Maven Guarantee.

Course syllabus

18 live sessions • 80 lessons • 6 projects

Live sessions

3 hrs / week

Designed for working professionals

Hands-On Lab Work

1-2 hrs / week

Complete one lab each week in Weeks 1–5. Each lab is divided into parts you can work through after the relevant class. Begin shaping your capstone in Week 4 and complete it in Week 6. Plan additional time outside the live sessions for this work.

Optional Office Hours

1 hr / week

Week 1

Jan 12—Jan 17

    Jan

    12

    LIVE Session 1 | Foundations of Agentic AI Governance

    Tue 1/127:00 PM—8:30 PM (EST)

    Case Study | The OpenClaw shadow-agent wave (2026)

    1 item

    Jan

    13

    Office Hours (Wednesday, 60 min) NOT 🔴 RECORDED

    Wed 1/137:00 PM—8:00 PM (EST)

    Jan

    14

    LIVE Session 2 | ISO/IEC 42001 for Practitioners (Build Accountability and the AIMS)

    Thu 1/147:00 PM—8:30 PM (EST)

    Lab 1.1 | Stand Up Your AI Governance Workspace

    2 items

    Lab 1.2 | Spot the Agents

    1 item

    Week 1 Toolkit: Program Foundations

    6 items

    Frequently Asked Questions (FAQs)

    6 items

Week 2

Jan 18—Jan 24

    Jan

    19

    LIVE Session 3 | EU AI Act for Practitioners (Map the System and Determine Applicable Obligations)

    Tue 1/197:00 PM—8:30 PM (EST)

    Case Study | Mobley v. Workday

    1 item

    Jan

    20

    Office Hours (Wednesday, 60 min) NOT 🔴 RECORDED

    Wed 1/207:00 PM—8:00 PM (EST)
    Optional

    Jan

    21

    LIVE Session 4 | NIST AI RMF for Practitioners (Assess Impacts and Prioritize Risk Treatment)

    Thu 1/217:00 PM—8:30 PM (EST)

    Lab 2.1 | Map the Agent

    2 items

    Lab 2.2 | Threat-Model the Agent and Rank Its Risks

    2 items

    Week 2 Toolkit: Risk & Impact

    4 items

    Frequently Asked Questions (FAQs)

    7 items

Leave with an agent-governance portfolio you can present.

Build the skills to govern AI agents. Join the next live cohort.

Pricing options

Employer paying? $2,500 includes everything on this page. Here’s how to get it approved: see Get your employer to pay below.

Self-funded? Save $500 with code KNOW-YOUR-AGENTS at checkout.

Laid off or between roles? See if you qualify for career-transition pricing →

Training a team? Teams of 2–9 save 20% and teams of 10+ save 25% through Maven for Teams. Training a team of 10+? See the private Team Program →

Get your employer to pay

This course fits a training or CPE budget: 24 CPE toward ISACA, ISC2, CompTIA, and IAPP renewals, and a governance package you can reuse on your company’s own AI agents. Maven gives you a receipt, a detailed invoice with your company name, and a certificate of completion for your records.

Copy this email to your manager:

Hi [Manager], I’d like to take Agentic AI Governance for GRC & Cybersecurity, a six-week live course on Maven. It trains me to assess AI agents before they go live: owners, risks, authority limits, human approval, and the evidence an auditor would ask for. I’d finish with a governance package I can reuse on our own AI projects, plus 24 CPE toward my certification renewals. The cost is $2,500, and Maven provides a receipt, an invoice with our company name, and a certificate of completion. Can we use our training budget for it?

Frequently asked questions

Show the evidence behind your decision.

Your portfolio grows from the work you complete in the guided labs. For the capstone, reuse and adapt relevant evidence for your chosen agent, then assemble it into one indexed governance package. Templates and platform records give you a starting point throughout the course.

What goes in your portfolio:

→ Agent profile and system map: what the agent does, what it can access, and who owns it.

→ Obligations, impacts, and risks: the requirements you identified and the risks you prioritized.

→ Authority and oversight: permitted actions, approval boundaries, and accountable people.

→ Supplier and test evidence: what you reviewed, what you tested, and what remains uncertain.

→ Operational requirements: release conditions, monitoring, change control, and incident recovery.

→ Decision memo: your Go, Conditional Go, or No-Go recommendation, with conditions and reasons.

Choose a capstone that fits your work

Choose a refund, hiring, invoice-payment, IT-helpdesk, coding, or patient-scheduling agent. You can also assess shadow agents and embedded vendor features, or bring an approved workplace scenario using sanitized information.

Sign up and shape your approach at the Week 4 Capstone Brainstorming Workshop. Present at Demo Day and submit your final package in Week 6.

This is individual work, with peer and instructor feedback along the way.

Build the evidence behind your next AI-agent review.

January 12 cohort: 30 seats. The first 10 to enroll get a 20-minute 1:1 call with me. Click Enroll and I'll see you in the live cohort. Paying yourself? Use code KNOW-YOUR-AGENTS to save $500.

Covered by Maven’s Satisfaction Guarantee.

Free resources: the Agent Pre-Deployment Review Kit, the AI Risk Assessment Kit, and past Lightning Lesson recordings are on my Maven profile.

Maven for Teams

Reimbursement

Get your company to pay

Everything L&D needs: email template, receipts, and certificate of completion.

Get reimbursed

Team discount

Learn with your teammates

Save 20%+ when 2 or more teammates enroll in the same cohort.

Save 20%+ with a team

Private cohort

Run a cohort for your org

A dedicated cohort with a custom schedule and curriculum, tailored to your team.

Book a private cohort

$2,500

USD

·
Jan 12—Feb 18
Enroll