ISACA Advanced in AI Security Management (AAISM) Training Course

This instructor-led, live training in Malaysia (online or onsite) is aimed at intermediate-level enterprise leaders who wish to understand how to govern and secure AI systems responsibly and in compliance with emerging global frameworks such as the EU AI Act, GDPR, ISO/IEC 42001, and the U.S. Executive Order on AI.

By the end of this training, participants will be able to:

• Understand the legal, ethical, and regulatory risks of using AI across departments.
• Interpret and apply major AI governance frameworks (EU AI Act, NIST AI RMF, ISO/IEC 42001).
• Establish security, auditing, and oversight policies for AI deployment in the enterprise.
• Develop procurement and usage guidelines for third-party and in-house AI systems.

This course offers a practical introduction to securing modern AI-powered applications, APIs, copilots, and autonomous agents. Participants will learn how AI security differs from traditional web security, explore common AI-specific threats such as prompt injection, RAG poisoning, and agent abuse, and understand how to protect AI systems using layered defenses including WAFs, AI gateways, API security, and guardrails. Through hands-on labs and real-world examples, students gain the skills to identify AI attack patterns, secure LLM-based applications, and deploy effective runtime defenses for production environments.

This instructor-led, live training in Malaysia (online or onsite) is aimed at beginner-level to intermediate-level IT professionals who wish to understand and implement AI TRiSM in their organizations.

By the end of this training, participants will be able to:

• Grasp the key concepts and importance of AI trust, risk, and security management.
• Identify and mitigate risks associated with AI systems.
• Implement security best practices for AI.
• Understand regulatory compliance and ethical considerations for AI.
• Develop strategies for effective AI governance and management.

This instructor-led, live training in Malaysia (available online or onsite) is tailored for intermediate to advanced-level AI developers, architects, and product managers seeking to identify and mitigate risks associated with LLM-powered applications, including prompt injection, data leakage, and unfiltered outputs, while integrating security controls such as input validation, human-in-the-loop oversight, and output guardrails.

Upon completing this training, participants will be able to:

• Comprehend the fundamental vulnerabilities inherent in LLM-based systems.
• Implement secure design principles within LLM application architectures.
• Utilize tools such as Guardrails AI and LangChain for validation, filtering, and safety enforcement.
• Incorporate techniques like sandboxing, red teaming, and human-in-the-loop reviews into production-grade pipelines.

This course teaches software developers how to build AI-powered applications securely by design. Participants learn how to protect chatbots, copilots, RAG pipelines, and AI agents against AI-specific threats such as prompt injection, data poisoning, tool abuse, secret leakage, and insecure model output. The course covers secure prompt design, RAG security, least-privilege access, guardrails, and red-team testing, helping developers build AI features that are secure, reliable, and resilient in real-world environments.

This instructor-led, live training in Malaysia (online or onsite) is aimed at intermediate-level AI and cybersecurity professionals who wish to understand and address the security vulnerabilities specific to AI models and systems, particularly in highly regulated industries such as finance, data governance, and consulting.

By the end of this training, participants will be able to:

• Understand the types of adversarial attacks targeting AI systems and methods to defend against them.
• Implement model hardening techniques to secure machine learning pipelines.
• Ensure data security and integrity in machine learning models.
• Navigate regulatory compliance requirements related to AI security.

This instructor-led, live training in Malaysia (online or onsite) is aimed at security engineers and compliance officers who wish to harden EXO deployments, control model access, and govern AI workloads running entirely on-premise.

This instructor-led, live training in Malaysia (online or onsite) is designed for beginner-level IT security, risk, and compliance professionals seeking to understand foundational AI security concepts, threat vectors, and global frameworks such as NIST AI RMF and ISO/IEC 42001.

Upon completing this training, participants will be able to:

• Comprehend the distinct security risks inherent in AI systems.
• Recognise threat vectors including adversarial attacks, data poisoning, and model inversion.
• Apply foundational governance models such as the NIST AI Risk Management Framework.
• Align AI initiatives with emerging standards, compliance guidelines, and ethical principles.

This instructor-led, live training in Malaysia (online or onsite) is aimed at security and ML engineers who need to identify, test, and defend against attacks on ML models and LLM-powered applications.

Based on the latest OWASP GenAI Security Project guidance, participants will learn to identify, assess, and mitigate AI-specific threats through hands-on exercises and real-world scenarios.

This instructor-led, live training in Malaysia (online or onsite) is designed for advanced-level professionals who want to implement and assess techniques such as federated learning, secure multiparty computation, homomorphic encryption, and differential privacy within real-world machine learning workflows.

Upon completion of this training, participants will be able to:

• Comprehend and evaluate key privacy-preserving techniques in machine learning.
• Deploy federated learning systems using open-source frameworks.
• Apply differential privacy to ensure safe data sharing and model training.
• Utilize encryption and secure computation methods to protect model inputs and outputs.

This instructor-led, live training in Malaysia (online or onsite) is designed for advanced-level security professionals and ML specialists who wish to simulate attacks on AI systems, uncover vulnerabilities, and enhance the robustness of deployed AI models.

By the end of this training, participants will be able to:

• Simulate real-world threats to machine learning models.
• Generate adversarial examples to test model robustness.
• Assess the attack surface of AI APIs and pipelines.
• Design red teaming strategies for AI deployment environments.

This instructor-led, live training in Malaysia (online or onsite) is designed for intermediate-level engineers and security professionals aiming to protect edge-deployed AI models from threats like tampering, data leakage, adversarial inputs, and physical attacks.

Upon completion of this training, participants will be able to:

• Identify and evaluate security risks associated with edge AI deployments.
• Apply techniques for tamper resistance and encrypted inference.
• Harden models deployed at the edge and secure data pipelines.
• Implement threat mitigation strategies tailored to embedded and constrained systems.