How to audit AI: a practitioner's method, from scope to report
Najwan Hudaihed
The AI Auditor
A 9-week live cohort: audit an AI system from your own organisation, end to end.
You've been asked to "look at AI", but it doesn't fit the audit programmes you've used for years. AI hides in vendor software, in-house tools built on third-party models, and staff using personal accounts. The metrics look reassuring but mask bias, drift and data leakage. Ask who owns the model and you get four different answers. Meanwhile, the regulation keeps moving: EU AI Act high-risk obligations will apply from December 2027 for stand-alone systems, and August 2028 for AI in regulated products.
Most AI governance training is written for data scientists or lawyers. This course is written for you: the auditor who has to scope the work, gather the evidence and defend a finding in front of an audit committee.
Over nine weeks you'll take one AI system from scope to board report, using the disciplines you already trust: risk-based scope, evidence, criteria and findings. Every assignment is applied to an AI use case from your own organisation, so you finish with a working audit file, not just a certificate.
What you’ll learn
Go from being asked to 'look at AI' to leading a defensible AI audit, from scope to board report, using methods you already trust.
Find AI across approved, vendor-embedded and shadow layers, score its risk, confirm the EU AI Act tier, and write a scoping memo.
Test training data for provenance, bias, leakage and lawful basis, and trace lineage from source to decision.
Interpret the metrics and what they hide, apply the four-fifths rule, set drift thresholds and evaluate GenAI outputs.
Audit access, change and vendor model updates, and test for prompt injection and third-party data risks.
Map ownership and the three lines of defence, and test compliance against the EU AI Act, ISO/IEC 42001 and the NIST AI RMF.
Write five-element AI findings with cited criteria, rate them, and brief an audit committee in plain language.
Learn directly from Najwan
Najwan Hudaihed
AI audit, taught by an auditor, for auditors.
Who this course is for
IT auditors, internal auditors and risk professionals who need to audit AI, not just talk about it
Audit managers building AI into the audit universe and the annual plan
Second-line risk and compliance professionals responsible for AI oversight
What's included
Live sessions
Learn directly from Najwan Hudaihed in a real-time, interactive format.
Lifetime access
Go back to course content and recordings whenever you need to.
Community of peers
Stay accountable and share insights with like-minded professionals.
Certificate of completion
Share your new skills with your employer or on LinkedIn.
Maven Guarantee
Your purchase is backed by the Maven Guarantee.
Course syllabus
Week 1
Jan
26
Session 1: Why AI changes audit
Week 2
Feb
2
Session 2: Find the AI and draw the boundary
Schedule
Live sessions
2 hrs / week
Tue, Jan 26
3:00 PM—5:00 PM (UTC)
Tue, Feb 2
3:00 PM—5:00 PM (UTC)
Tue, Feb 9
3:00 PM—5:00 PM (UTC)
Projects
3 hrs / week
Frequently asked questions
Maven for Teams
Reimbursement
Get your company to pay
Everything L&D needs: email template, receipts, and certificate of completion.
Get reimbursedTeam discount
Learn with your teammates
Save 20%+ when 2 or more teammates enroll in the same cohort.
Save 20%+ with a teamPrivate cohort
Run a cohort for your org
A dedicated cohort with a custom schedule and curriculum, tailored to your team.
Book a private cohort$1,495
USD