Founder, CyberProsAI · CISSP, CISA, AIGP

Your company is putting AI agents to work. Someone has to decide what each one may do, and what evidence is enough to let it go live.
If nobody owns that where you work, it can be you.
In six live weeks, you practice making that call in hands-on labs, then defend your own decision at Demo Day.
Jan 12 cohort: 30 seats. First 10 to enroll get a 20-minute 1:1 call with me. Paying yourself? Save $500 with code KNOW-YOUR-AGENTS.
📚 View the syllabus here
Your enrollment includes:
Your own VerifyWise workspace to connect agent risks, controls & evidence.
12 live classes and 6 office hours for questions and feedback.
Guided labs to test approval limits, challenge vendor claims, and investigate a simulated incident.
A governance portfolio and decision memo supporting your Go, Conditional Go, or No-Go recommendation.
Lifetime access to recordings, lab guides, and templates.
Bring your portfolio to your next interview or use it as a starting point for an AI review at work.
⭐ Rated 5.0 by alumni.
For GRC, security, and audit pros. No coding required. Up to 24 CPE.
Two-Week Test Drive: Take the first 4 live classes. Not worth it? Full refund through Jan 24. Next cohort isn't until April.
By the end of the course, you’ll be able to assess an AI agent, test its controls, and defend a deployment recommendation with evidence.
Build an agent inventory in VerifyWise showing what each agent does, what it can access, and who owns it.
Create an AI policy with testable requirements for authority limits, human approval, and shutdown.
Apply ISO/IEC 42001 to define who approves deployment, accepts risk, and can stop an agent.
Map an agent’s tools, data, dependencies, and trust boundaries to identify where it could cause harm.
Use the EU AI Act to assess classification and obligations, and NIST AI RMF to prioritize risk treatment.
Build a threat model with MITRE ATLAS and turn findings into risk treatments with named owners.
Define what an agent may read, change, send, or spend and which actions require human approval.
Configure authority limits and an approval gate in Dify, then test whether unauthorized actions are blocked.
Inspect traces in Opik to verify control behavior and identify where human oversight can fail.
Assess supplier claims and identify evidence gaps that could affect your deployment recommendation.
Run agent evaluations, compare automated judgments with human review, and investigate disagreements.
Explain what test results demonstrate, what they miss, and whether the evidence supports release.
Define rollout conditions, monitoring thresholds, and who must act when an agent exceeds its limits.
Test a model or workflow change and use regression results to decide whether it should proceed.
Investigate a simulated compromise, document containment, and set conditions for safe recovery.
Choose an agent scenario or bring an approved workplace use case for your individual capstone.
Assemble risks, controls, test evidence, and operating conditions into a reusable governance package.
Present your Go, Conditional Go, or No-Go recommendation at Demo Day and defend it with evidence.

I Train GRC & Cyber Pros to GOVERN AI Agents | Ph.D. Candidate, Cyber Defense



GRC, risk, audit, privacy, and compliance professionals who need to assess AI agents and defend deployment decisions.
Cybersecurity professionals who need to test agent permissions, investigate failures, and verify controls before and after deployment.
Working professionals moving into AI governance who want to become the AI governance lead where they already work.
A willingness to learn how to Govern AI Agents. Basic familiarity with GRC, cybersecurity, audit, privacy or risk work would be nice to have
Session 1 explains how AI agents work, what makes them different from other automation, and where governance fits.

Live sessions
Learn directly from François B. Arthanas in a real-time, interactive format.
12 live classes over 6 weeks
Two 90-minute classes each week (18 hours), with demonstrations, practical scenarios, breakout discussions, and time to work through governance decisions.
6 office hours and capstone support
A weekly 60-minute session for questions and feedback. Week 4 includes the Capstone Brainstorming Workshop and capstone sign-up; Week 6 includes a final clinic before Demo Day.
Hands-on labs with solution walkthroughs
Hands-on labs across Weeks 1–5. Each has step-by-step instructions, a chaptered solution walkthrough video, and a submission with feedback.
A capstone you defend at Demo Day
Assemble your evidence into one governance package and a two-page decision memo, then present and defend your Go, Conditional Go, or No-Go decision at Demo Day, with peer and instructor feedback along the way.
Verifiable certificate and 24 CPE
Earn your Certificate of Completion by completing the labs, passing the capstone, and meeting participation requirements. It carries 24 CPE (18 hours of live classes plus 6 hours of office hours) for ISACA, ISC2, CompTIA, and IAPP renewals, subject to each body's rules.
Your VerifyWise Agentic AI Governance Workspace
Use your own workspace during the cohort to connect agent records, owners, risks, controls, suppliers, and evidence.
Weekly toolkits and lifetime access
A toolkit of working templates each week: policies, impact assessment, vendor questionnaire, deployment checklist, incident runbook and executive report. Plus lifetime access to recordings, slides and lab guides.
Retake a future cohort for free
Want another pass? Join a future cohort again at no cost, space permitting.
Maven Guarantee
Your purchase is backed by the Maven Guarantee.
18 live sessions • 80 lessons • 6 projects
Live sessions
3 hrs / week
Designed for working professionals
Hands-On Lab Work
1-2 hrs / week
Complete one lab each week in Weeks 1–5. Each lab is divided into parts you can work through after the relevant class. Begin shaping your capstone in Week 4 and complete it in Week 6. Plan additional time outside the live sessions for this work.
Optional Office Hours
1 hr / week
Jan
12
A free AI agent spread onto employees' machines and work accounts in about a week, and in many organizations nobody had approved it or owned it.
The OpenClaw shadow-agent wave (2026)
Jan
13
Jan
14
Lab 1.1 | Stand Up Your AI Governance Workspace
Lab 1.1 | Stand Up Your AI Governance Workspace
Lab 1.2 | Spot the Agents
AI Governance Policy Template
AI Acceptable Use Policy Template
AI Governance Charter
AI Governance RACI Matrix
AI Agent Inventory Register
Policy Drafter Agent Skill
Start here if you need to explain governance, identify who decides, or register an agent.
Q1.01: What changes when we govern an agent rather than an AI chatbot?
Q1.02: Which framework should I use for which question?
💡Q1.03: What is a sensible minimum governance setup?
Q1.04: Who should own an agent and who makes the deployment decision?
💡Q1.05: What belongs in an AI inventory and an agent registry?
Q1.06: What should we do about shadow agents and AI features enabled inside SaaS
Jan
19
A job applicant says an AI screening tool rejected him more than 100 times, and a court has allowed him to sue the software vendor, not only the employers.
Mobley v. Workday
Jan
20
Jan
21
Lab 2.1 | Map the Agent
Submit Lab 2.1 | Map the Agent
Lab 2.2 | Threat-Model the Agent and Rank Its Risks
Submit Lab 2.2 | Threat-Model the Agent and Rank Its Risks
AI Impact Assessment Template
Agent Risk Register
Framework Crosswalk (ISO/IEC 42001, NIST AI RMF, EU AI Act, OWASP Agentic Top 10
Risk Assessment Agent Skill
Use this when you need a system map, a reasoned legal classification, or a risk someone can act on.
💡Q2.01: What exactly am I mapping when I map an agent?
Q2.02: Can the EU AI Act apply if our company is outside the EU?
💡Q2.03: Are all agents high-risk under the EU AI Act?
Q2.04: When could a deployer become a provider?
Q2.05: How do an impact assessment, a threat model, and a risk assessment differ
Q2.06: How do I use the NIST AI RMF without turning it into a checklist exercise
💡Q2.07: What does a well-written agent risk look like?
Build the skills to govern AI agents. Join the next live cohort.
Employer paying? $2,500 includes everything on this page. Here’s how to get it approved: see Get your employer to pay below.
Self-funded? Save $500 with code KNOW-YOUR-AGENTS at checkout.
Laid off or between roles? See if you qualify for career-transition pricing →
Training a team? Teams of 2–9 save 20% and teams of 10+ save 25% through Maven for Teams. Training a team of 10+? See the private Team Program →
This course fits a training or CPE budget: 24 CPE toward ISACA, ISC2, CompTIA, and IAPP renewals, and a governance package you can reuse on your company’s own AI agents. Maven gives you a receipt, a detailed invoice with your company name, and a certificate of completion for your records.
Copy this email to your manager:
Hi [Manager], I’d like to take Agentic AI Governance for GRC & Cybersecurity, a six-week live course on Maven. It trains me to assess AI agents before they go live: owners, risks, authority limits, human approval, and the evidence an auditor would ask for. I’d finish with a governance package I can reuse on our own AI projects, plus 24 CPE toward my certification renewals. The cost is $2,500, and Maven provides a receipt, an invoice with our company name, and a certificate of completion. Can we use our training budget for it?
Your portfolio grows from the work you complete in the guided labs. For the capstone, reuse and adapt relevant evidence for your chosen agent, then assemble it into one indexed governance package. Templates and platform records give you a starting point throughout the course.
What goes in your portfolio:→ Agent profile and system map: what the agent does, what it can access, and who owns it.
→ Obligations, impacts, and risks: the requirements you identified and the risks you prioritized.
→ Authority and oversight: permitted actions, approval boundaries, and accountable people.
→ Supplier and test evidence: what you reviewed, what you tested, and what remains uncertain.
→ Operational requirements: release conditions, monitoring, change control, and incident recovery.
→ Decision memo: your Go, Conditional Go, or No-Go recommendation, with conditions and reasons.
Choose a refund, hiring, invoice-payment, IT-helpdesk, coding, or patient-scheduling agent. You can also assess shadow agents and embedded vendor features, or bring an approved workplace scenario using sanitized information.
Sign up and shape your approach at the Week 4 Capstone Brainstorming Workshop. Present at Demo Day and submit your final package in Week 6.
This is individual work, with peer and instructor feedback along the way.
January 12 cohort: 30 seats. The first 10 to enroll get a 20-minute 1:1 call with me. Click Enroll and I'll see you in the live cohort. Paying yourself? Use code KNOW-YOUR-AGENTS to save $500.
Covered by Maven’s Satisfaction Guarantee.
Free resources: the Agent Pre-Deployment Review Kit, the AI Risk Assessment Kit, and past Lightning Lesson recordings are on my Maven profile.
Maven for Teams
Reimbursement
Get your company to pay
Everything L&D needs: email template, receipts, and certificate of completion.
Get reimbursedTeam discount
Learn with your teammates
Save 20%+ when 2 or more teammates enroll in the same cohort.
Save 20%+ with a teamPrivate cohort
Run a cohort for your org
A dedicated cohort with a custom schedule and curriculum, tailored to your team.
Book a private cohort$2,500
USD