ISO/IEC 27090:2026
AI cybersecurity guidance: identify threats, assess consequences and plan detection and mitigation across the AI lifecycle.
2026 EDITION · APPLIED EXECUTIVE PROGRAM
AI Governance Standards in Action
Three standards. One governance system. Evidence you can defend.
Turn ISO/IEC 27090:2026, EN 18286:2026 and IEEE 2863-2026 into practical governance work through ARCHAI WORLD Studio missions, authorized MCP context and human judgment.
Included with Professional. Unlimited employee participation in this program with Corporate.
- 6 weeks
- 36 learning hours
- 9 missions
- English + Spanish
Pioneer the practice of evidence-based AI governance.
Our approach brings standards learning, enterprise architecture, Studio execution, MCP context and executive decision-making into one applied journey. Build a portfolio that shows how you reason, what you tested and who owns the next decision.
Three complementary lenses
EN 18286:2026 — CEN-CENELEC
Quality management for EU AI Act regulatory purposes: build and review the processes and evidence supporting the applicable quality management obligations.
IEEE 2863-2026
Recommended practice for organizational AI governance: connect principles, accountability, governing bodies and practical decision processes.
Your final deliverable is a governance evidence portfolio.
Bring together a system scope, dependency map, threat assessment, quality process pack, decision charter, gap register and implementation plan. Every conclusion distinguishes verified evidence, assumptions and unresolved gaps.
What makes the learning different
One enterprise case throughout
Follow the same AI-enabled service across security, quality and governance. See how one change affects all three.
Missions with reviewable outputs
Each mission has an objective, permitted sources, execution boundaries, acceptance criteria and a human reviewer.
Architecture as context
Connect decisions to capabilities, processes, applications, dependencies, risks, controls and accountable owners.
Evidence over attendance
Assessment rewards traceability, defensible reasoning, tested controls and corrective action.
Bilingual working practice
Learn and submit in English or Spanish, with a shared glossary and an executive summary in both languages.
Judgment under pressure
Practice escalation, constructive challenge and decisions when the evidence is incomplete. Coaching is embedded in the exercises.
Six weeks from interpretation to defended decisions
- WEEK 01Scope, roles and dependencies · Missions 01–02
- WEEK 02AI threats and defensive controls · Mission 03
- WEEK 03Incident response and recovery · Mission 04
- WEEK 04Quality processes and evidence gaps · Missions 05–06
- WEEK 05Governance authority and trade-offs · Missions 07–08
- WEEK 06Integrated portfolio and board defense · Mission 09
Nine missions. Concrete work.
- 01
ALL THREE
Scope before compliance
AI inventory, intended use, role and applicability memo
- 02
ARCHITECTURE INTEGRATION
Find the hidden dependency
Capability, process, application, supplier and owner map
- 03
ISO/IEC 27090
Defend the AI lifecycle
Threat model, protection priorities and detection plan
- 04
ISO/IEC 27090
Rehearse the incident
Controlled incident exercise, response record and recovery test
- 05
EN 18286
Build the quality system
QMS scope, process owners, document controls and evidence index
- 06
EN 18286
Close the evidence gap
Gap register, corrective actions and change review
- 07
IEEE 2863
Assign decision authority
Governance charter, decision rights and escalation criteria
- 08
IEEE 2863
Defend a difficult decision
Trade-off memo, stakeholder impact and recorded human judgment
- 09
INTEGRATED CAPSTONE
Face the governance board
Evidence portfolio, board defense and 90-day implementation plan
These are the new program’s designed learning missions. They are not a claim that nine new templates have already been installed in your workspace.
How Studio and MCP support your work
Use supplied educational cases or authorized organizational information. Source availability, tools and permissions are confirmed per workspace. Production integrations, Enterprise MCP and full enterprise audit exports are scoped separately.
- 1Define the objective and authorize the sources.
- 2Retrieve available context and identify missing evidence.
- 3Create and run a bounded Studio mission.
- 4Review outputs, challenge assumptions and record a human decision.
- 5Revise the evidence pack and track approved follow-up work.
Earn a credential through demonstrated work
The proposed program awards an ARCHAI WORLD University Certificate of Applied Achievement after a score of at least 80/100, submission of all nine missions and a successful capstone defense. Rubric: traceability 25%, integrated reasoning 25%, control and quality evidence 20%, human judgment 20%, bilingual executive communication 10%. Critical permission or evidence-integrity failures must be corrected before passing.
Built for people who must make governance work
AI governance leaders, enterprise architects, CISOs, quality managers, risk and compliance teams, product owners, internal auditors and executive sponsors. Basic familiarity with AI systems is recommended; coding is not required.
Already a student? This program is included.
Professional
Included for the individual member during an active Professional membership. One Studio + MCP license for 12 months from membership purchase.
Explore ProfessionalCorporate
Unlimited employees of the subscribing organization can participate in this program during the active annual membership. Corporate includes 50 Studio + MCP licenses for 12 months; unlimited participation does not mean unlimited execution licenses.
Explore CorporateRequest student activation
Opens your email app with a pre-filled request. Activation is confirmed by our team; nothing is enrolled automatically.
Questions before you begin
Is this included in my membership?
Yes. Professional includes participation for the individual member. Corporate includes unlimited employee participation in this program. Membership must be active.
Does Corporate provide unlimited Studio and MCP accounts?
No. Program participation is unlimited for employees of the subscribing organization. The current Corporate package includes 50 Studio + MCP licenses; additional execution seats are handled separately.
Do I receive an ISO, CEN-CENELEC or IEEE certification?
No. The assessed credential is issued by ARCHAI WORLD University. This is independent education, without claimed endorsement or accreditation from those organizations.
Does completing the program establish AI Act compliance?
No. Training and educational evidence do not establish legal compliance or conformity. Applicability and evidence must be evaluated for the actual system and organization.
Are the full standards included?
Publisher-controlled standards texts are not bundled. Use authorized access under the relevant publisher’s terms. The program provides original learning materials and exercises.
Can I use my organization’s information?
Yes, when authorized and compatible with the workspace permissions. A provided educational case is available when enterprise data or integrations cannot be used.
Is the program available in both languages?
The program is designed for English and Spanish learning materials and submissions. Cohort language and live-session timing are confirmed at activation.
Build the evidence. Defend the decision.
Make the new standards part of how your organization works.
Explore my accessOFFICIAL REFERENCES
Independent education by ARCHAI WORLD University. References checked 19 October 2026. No standards-body affiliation or guaranteed compliance is implied.