Free assessments
Test your compliance knowledge
Short, free online assessments. Pass and get a certificate of completion you can print, verify, and share on LinkedIn.
Regulation (EU) 2024/1689: Artificial Intelligence Act
EU AI Act
EU AI Act Fundamentals
Test your understanding of the EU AI Act (Regulation (EU) 2024/1689) — risk classification, prohibited practices, high-risk obligations, and key deadlines.
EU AI Act Practitioner
Deployer obligations, transparency duties, GPAI systemic risk, and fundamental rights impact assessments under the AI Act.
EU AI Act Advanced
Complex AI Act scenarios: prohibited practice edge cases, conformity assessment routes, GPAI systemic-risk thresholds, and enforcement.
Regulation (EU) 2016/679: General Data Protection Regulation
GDPR
GDPR Essentials
Test your understanding of the GDPR (Regulation (EU) 2016/679) — lawful bases, data subject rights, breach notification, and accountability.
GDPR Practitioner
Applying GDPR in practice: transparency notices, automated decision-making, design obligations, and cross-border transfers.
GDPR Advanced
Deep GDPR scenarios covering joint controllership, international transfers, enforcement mechanics, and complex data subject rights.
EU AI Act, ISO/IEC 42001 & NIST AI Risk Management Framework
AI Act / ISO 42001 / NIST AI RMF
California Consumer Privacy Act (as amended by the CPRA)
CCPA
CCPA Basics
The California Consumer Privacy Act (as amended by the CPRA): core consumer rights and business obligations.
CCPA Practitioner
Applying CCPA/CPRA in practice: verifiable requests, service provider contracts, and notice obligations.
CCPA Advanced
Complex CCPA/CPRA scenarios: enforcement risk, cross-border considerations, and interaction with other US privacy laws.
Regulation (EU) 2022/2554: Digital Operational Resilience Act
DORA
DORA Basics
The Digital Operational Resilience Act: ICT risk management, incident reporting, and third-party oversight for EU financial entities.
DORA Practitioner
Implementing DORA in practice: incident classification thresholds, third-party contracts, and resilience testing programmes.
DORA Advanced
Complex DORA scenarios: Oversight Framework mechanics, cross-border ICT concentration risk, and TLPT programme design.
General Data Protection Regulation & UK General Data Protection Regulation
GDPR / UK GDPR
ISO/IEC 23894:2023, AI Risk Management
ISO 23894
ISO/IEC 23894 Basics
AI risk management guidance: applying ISO 31000 risk principles specifically to artificial intelligence.
ISO/IEC 23894 Practitioner
Applying structured AI risk management in practice: sources of risk, stakeholder communication, and recording/reporting.
ISO/IEC 23894 Advanced
Complex AI risk management scenarios: cascading risk, third-party model risk, and integrating 23894 guidance across a risk-management ecosystem.
ISO/IEC 27001:2022, Information Security Management
ISO 27001
ISO/IEC 27001 Basics
The fundamentals of the leading information security management system (ISMS) standard.
ISO/IEC 27001 Practitioner
Implementing an ISMS in practice: risk treatment, the Statement of Applicability, and continual improvement.
ISO/IEC 27001 Advanced
Complex ISMS scenarios: multi-site scoping, integrating ISO 27001 with other frameworks, and mature risk governance.
ISO/IEC 42001:2023, Artificial Intelligence Management System
ISO 42001
ISO/IEC 42001 Basics
The fundamentals of the world's first AI management system (AIMS) standard.
ISO/IEC 42001 Practitioner
Implementing an AI management system in practice: risk assessment, objectives, and operational controls.
ISO/IEC 42001 Advanced
Complex AIMS scenarios: multi-framework integration, third-party AI supply chains, and mature AI governance.
Directive (EU) 2022/2555: Network and Information Security Directive 2
NIS2
NIS2 Basics
The Network and Information Security Directive 2: scope, governance duties, and incident reporting for essential and important entities.
NIS2 Practitioner
Applying NIS2 governance, risk-management, and incident-reporting duties in practice, including supply chain security.
NIS2 Advanced
Complex NIS2 scenarios: cross-border supervision, scope edge cases, and integrating NIS2 with DORA and ISO 27001 programmes.
NIST AI Risk Management Framework (AI RMF 1.0)
NIST AI RMF
NIST AI RMF Basics
The NIST AI Risk Management Framework's four core functions: Govern, Map, Measure, and Manage.
NIST AI RMF Practitioner
Applying the Govern-Map-Measure-Manage functions in practice, including the AI RMF Playbook's practical suggestions.
NIST AI RMF Advanced
Complex NIST AI RMF scenarios: generative AI profile considerations, cross-framework mapping, and organisational maturity.
UK General Data Protection Regulation
UK GDPR
UK GDPR Basics
How the UK GDPR and Data Protection Act 2018 work post-Brexit: lawful bases, principles, and the ICO's role.
UK GDPR Practitioner
Divergence between UK GDPR and EU GDPR, ICO guidance, and practical compliance for UK-facing organisations.
UK GDPR Advanced
Complex UK data protection scenarios: adequacy risk, ICO enforcement powers, and cross-border programme design.