Module 5 of 5
Governance and practice
What regulators and standards ask of an engineering team, how to attack your own systems on purpose, and a complete security design for a multi-tenant agent platform.
Controls only work inside an organization that knows what it is running, tests it on purpose, and can show its work. This module covers the obligations an engineering team answers to, the red-team program that keeps findings fixed, and a complete security design that pulls the whole course together.
By the end of it you should be able to classify an AI system under the EU AI Act, map one set of controls to several frameworks, run a red-team program whose results are measured in code, and defend a layered design for an agent platform: which layer stops what, which layers are deterministic, and what risk remains.
Lessons
- 5.aCompliance and regulationWhat do the EU AI Act, NIST, and ISO actually ask of an engineering team?21 min
- 5.bThe red-team programHow do I attack my own AI systems systematically and keep the findings fixed?20 min
- 5.cSecuring an agent platformWhat does the full security design of a multi-tenant agent platform look like?25 min