Get in Touch

Course Outline

Foundations: The EU AI Act for Technical Teams

  • Key obligations and terminology relevant to developers and operators.
  • Understanding prohibited practices under Article 4 from a technical standpoint.
  • Mapping legal requirements to engineering controls.

Secure and Compliant Development Lifecycle

  • Repository structure and policy-as-code approaches for AI projects.
  • Code review processes and automated static checks to identify risky patterns.
  • Dependency and supply-chain management for model components.

CI/CD Pipeline Design for Compliance

  • Pipeline stages: build, test, validation, package, and deploy.
  • Integrating governance gates and automated policy checks.
  • Ensuring artifact immutability and tracking provenance.

Model Testing, Validation, and Safety Checks

  • Data validation and bias detection tests.
  • Testing for performance, robustness, and adversarial resilience.
  • Automated acceptance criteria and comprehensive test reporting.

Model Registry, Versioning, and Provenance

  • Using MLflow or similar tools for model lineage and metadata management.
  • Versioning models and datasets to ensure reproducibility.
  • Recording provenance and producing audit-ready artifacts.

Runtime Controls, Monitoring, and Observability

  • Instrumentation for logging inputs, outputs, and decision-making processes.
  • Monitoring model drift, data drift, and performance metrics.
  • Implementing alerting, automated rollback, and canary deployment strategies.

Security, Access Control, and Data Protection

  • Applying least-privilege IAM principles for model training and serving environments.
  • Protecting training and inference data both at rest and in transit.
  • Managing secrets and adhering to secure configuration practices.

Auditability and Evidence Collection

  • Generating machine-readable logs and human-readable summaries.
  • Packaging evidence for conformity assessments and audits.
  • Establishing retention policies and ensuring secure storage of compliance artifacts.

Incident Response, Reporting, and Remediation

  • Detecting suspected prohibited practices or safety incidents.
  • Executing technical steps for containment, rollback, and mitigation.
  • Preparing technical reports for governance bodies and regulators.

Summary and Next Steps

Requirements

  • A foundational understanding of software development and deployment workflows.
  • Experience with containerization and basic Kubernetes concepts.
  • Familiarity with Git-based source control and CI/CD practices.

Audience

  • Developers responsible for building or maintaining AI components.
  • DevOps and platform engineers managing deployment processes.
  • Administrators overseeing infrastructure and runtime environments.
 14 Hours

Related Categories