AI compliance and regulations
SecAI+ CY0-001 · Lesson 18 of 18 · 2:22:15
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the CompTIA SecAI+ CY0-001 exam. In this lesson: the EU AI Act and its four risk levels, the OECD AI Principles, ISO/IEC 42001 and other ISO AI standards, the NIST AI Risk Management Framework (Govern, Map, Measure, Manage), corporate AI policies (sanctioned and unsanctioned tools, private and public models, sensitive data), third-party compliance evaluations, and data sovereignty. EU AI Act timeline: prohibited practices apply since February 2, 2025, rules for general-purpose AI models since August 2, 2025, and, after the 2026 AI Omnibus, high-risk obligations apply from December 2, 2027 (Annex III systems) and August 2, 2028 (regulated products), with Fernhill Telecom as the running example. Includes three original practice questions.
Preview the topics
- Fernhill wants an AI management system that an independent body can certify, to show partners that its AI program is well run. Which standard fits?
- Fernhill’s policy says that billing data may go only to models hosted in its own cloud tenant, never to a chatbot open to everyone. Which part of corporate policy is this?
- A Canadian partner requires that the prompts and logs of its customers stay stored in Canada, under Canadian law. Which requirement is this?