AI Governance, GRC, and Audit: What Every AI Manager Needs to Know
This webinar explores how organizations can establish effective AI governance, manage risks, and prepare for audits using ISO/IEC 42001. Participants will learn how to translate AI policies into practical controls, maintain meaningful human oversight, collect audit-ready evidence, and manage AI systems throughout their lifecycle. The session also examines the responsibilities of an AI manager and outlines practical steps for strengthening AI governance during the first 30 days.
The webinar covers:
- AI governance frameworks and decision-making
- ISO/IEC 42001 implementation and compliance
- AI risk management and legal considerations
- AI lifecycle controls and approval processes
- Evidence collection and audit procedures
- Human oversight, monitoring, and accountability
- The AI manager’s first 30-day action plan
Presenters:
Ferry Haris – CEO of FEHA International Consulting B.V.
Ferry is the founder and CEO of FEHA, an AI-native GRC company based in the Netherlands with a presence in Singapore. With a practitioner background spanning all three lines of defense, including IT audit, risk and compliance, and third-party risk management, he has spent his career close to the day-to-day realities of GRC work. This experience shapes FEHA’s products: practical tools designed to help GRC professionals work efficiently and cut through vendor jargon, rather than relying on overstated platforms chasing hype.
Islam Elzayat – Cybersecurity Expert
Islam is an IT Service Management Consultant with a strong background in IT Service Management and practical experience designing and implementing ITIL processes. He oversees the timely execution of projects, programs, and application service management initiatives to ensure alignment with business and technical roadmaps. Throughout his career, he has enhanced IT Service Management by collaborating with stakeholders, clients, and business partners. He is also a subject matter expert in discovery, discovery scheduling, configuration items, business service maps, service portfolios, and reporting.
