← All courses

Practitioner · AI governance

AI Risk & Impact Assessment

Make AI risk and impact decisions that are documented, consistent and defensible.

A practitioner course on the risk and impact requirements of ISO/IEC 42001:2023, the AI management system standard: AI risk assessment, AI risk treatment and AI system impact assessment, using guidance from ISO/IEC 42005:2025 and ISO/IEC 23894:2023.

Secure payment by Stripe · for yourself or for your team

Standard and editionISO/IEC 42001:2023 and ISO/IEC 42005:2025

Last updated3 October 2026

Preview this course

Experience the learning
before you enrol.

Watch a sample from AI Risk & Impact Assessment before you enrol.

AI Risk & Impact AssessmentSample

Learning outcomes

Knowledge you can put to work.

Connect the subject to the responsibilities and decisions people encounter in their roles.

  • Explain how AI risk assessment, risk treatment and system impact assessment fit together in ISO/IEC 42001
  • Identify AI risk sources and assess risks to the organisation's AI objectives
  • Assess potential impacts of an AI system on individuals, groups and society across its life cycle
  • Select treatment options and controls with reference to ISO/IEC 42001 Annex A
  • Document assessments and keep them current as AI systems change

Part of: AI Governance and ISO 42001 Training

Inside the course

A clear path through the essentials.

16 modules, 16 practice checkpoints and a final exam. Video runtimes are approximate; allow additional time for the practice questions and the final exam.

Part 1Module 1Approx. 9 min
  1. Why AI risk and impact assessment matter9 min
  2. Practice: Why AI risk and impact assessment matter3 questions
Part 2Module 2Approx. 9 min
  1. Recap: what ISO/IEC 42001 requires9 min
  2. Practice: Recap: what ISO/IEC 42001 requires3 questions
Part 3Module 3Approx. 8 min
  1. Profiling the AI system8 min
  2. Practice: Profiling the AI system3 questions
Part 4Module 4Approx. 8 min
  1. Setting AI risk criteria8 min
  2. Practice: Setting AI risk criteria3 questions
Part 5Module 5Approx. 8 min
  1. Identifying risks: objectives and sources8 min
  2. Practice: Identifying risks: objectives and sources3 questions
Part 6Module 6Approx. 8 min
  1. Data, life cycle and supplier risks8 min
  2. Practice: Data, life cycle and supplier risks3 questions
Part 7Module 7Approx. 8 min
  1. Analysing AI risks8 min
  2. Practice: Analysing AI risks3 questions
Part 8Module 8Approx. 8 min
  1. Evaluating and prioritising8 min
  2. Practice: Evaluating and prioritising3 questions
Part 9Module 9Approx. 8 min
  1. Planning the impact assessment8 min
  2. Practice: Planning the impact assessment3 questions
Part 10Module 10Approx. 8 min
  1. Impacts on individuals and groups8 min
  2. Practice: Impacts on individuals and groups3 questions
Part 11Module 11Approx. 8 min
  1. Impacts on society8 min
  2. Practice: Impacts on society3 questions
Part 12Module 12Approx. 8 min
  1. Documenting the impact assessment8 min
  2. Practice: Documenting the impact assessment3 questions
Part 13Module 13Approx. 8 min
  1. Treatment options and necessary controls8 min
  2. Practice: Treatment options and necessary controls3 questions
Part 14Module 14Approx. 8 min
  1. The statement of applicability8 min
  2. Practice: The statement of applicability3 questions
Part 15Module 15Approx. 7 min
  1. Treatment plan, approval and residual risk7 min
  2. Practice: Treatment plan, approval and residual risk3 questions
Part 16Module 16Approx. 7 min
  1. Keeping both assessments alive7 min
  2. Practice: Keeping both assessments alive3 questions

Frequently asked questions

Your questions,
answered.

About AI Risk & Impact Assessment, its certificate and enrolment.

Ask Sterling
Who is the AI Risk & Impact Assessment course for?

It is for people who assess or approve AI systems: AI governance leads, product owners, data scientists and engineers, and risk, privacy and compliance teams. It suits organisations that develop, provide or use AI and are building or running an AI management system to ISO/IEC 42001. A working knowledge of ISO/IEC 42001 helps; no programming knowledge is needed.

What does the AI Risk & Impact Assessment course cover?

It covers the ISO/IEC 42001:2023 requirements for AI risk assessment, AI risk treatment and AI system impact assessment; setting context, intended uses and AI objectives; identifying risk sources and analysing and evaluating AI risks with ISO/IEC 23894:2023 guidance; assessing impacts on individuals, groups and society with ISO/IEC 42005:2025; choosing treatment options and Annex A controls; and documenting and reviewing assessments as AI systems change.

How long does the AI Risk & Impact Assessment course take?

It is a set of short video modules, each followed by practice questions, and a final exam. The course page shows the number of modules and the approximate video runtime; allow additional time for the practice questions and the exam. With 12 months of access, you can complete it in one sitting or spread it over several sessions.

Do learners receive a certificate?

Yes. Learners who reach the 70% pass mark in the final exam receive a Sterling Academy Certificate of Completion for AI Risk & Impact Assessment. Each certificate carries a unique number and a QR code, and anyone can check it online using the certificate number and the holder's surname. It is a training certificate for the individual learner.

Is the course online and self-paced?

Yes. AI Risk & Impact Assessment is a self-paced online course made of short video modules, in English with captions. You study at your own pace during 12 months of access, and practice questions after modules help you check your understanding before the final exam. If a point is unclear, questions are answered by a Sterling consultant.

Can we enrol a team, and how much does it cost?

AI Risk & Impact Assessment has a list price of US$149 per learner, with a limited-time offer of US$99 per learner until 31 December 2026. Teams save 20% for 11 to 50 learners and 30% for 51 to 200; 201 or more learners are priced on request. Client administrators can track their team's progress. Prices are in US dollars, excluding taxes, and Sterling confirms final pricing and enrolment.

Does this course make our organisation ISO/IEC 42001 certified?

No. The Certificate of Completion is a training certificate: it shows that one person completed AI Risk & Impact Assessment and reached the pass mark in its final exam. ISO/IEC 42005 and ISO/IEC 23894 are guidance documents, and Sterling does not certify organisations. An organisation is certified to ISO/IEC 42001 by an independent certification body after that body's own audit.

Assessment & completion

Complete the learning.
Keep a verifiable record.

Learners who complete the course and its final exam receive a numbered Sterling Academy Certificate of Completion with online QR verification.

This records course completion. It does not confer ISO certification or a professional auditor qualification.

Pass mark
70%
Prerequisites
None
Ask about course requirements

Your next step

Ready to manage AI risk and impact?

Expert and experienced consultants, 8,100+ client engagements in 60+ countries, from gap assessment to a system ready for its certification audit.

Talk to a Sterling consultant

Not sure which course?

Plan your next step
in learning.

Discuss your learning needs