PECB says the course is “based on leading frameworks such as the NIST AI Risk Management Framework, the EU AI Act, and insights from the MIT AI Risk Repository”.
NIST AI Risk Management Framework
A voluntary framework published by the US National Institute of Standards and Technology for managing the risks of AI systems. The course uses it as a working method.
EU AI Act
The EU regulation that sets risk-based obligations for AI systems. It matters to UK organisations that place AI systems on the EU market.
MIT AI Risk Repository
A public collection of documented AI risks maintained at MIT. On the course you analyse real-world AI risk scenarios taken from it.
Standards the exam also covers
The candidate handbook’s first domain expects knowledge of “key international standards and frameworks such as ISO/IEC 42001, ISO/IEC 22989, ISO/IEC 23894, and the NIST AI Risk Management Framework”. ISO/IEC 23894:2023 gives guidance on AI risk management; it is not a requirements standard an organisation certifies against. The course covers it, but is not based on it.
Regulation across regions, the UK included
The same domain covers AI regulation across major regions, including the EU AI Act, GDPR, UK and US AI laws, sector-specific regulations and emerging frameworks in other regions. Check the official materials for how far each jurisdiction is covered.