Beyond standard courses, I design fully customised, scenario-based training that uses AI to generate realistic, immersive exercises tailored to your environment, roles and risks. Your teams learn AI and security by doing — through scenarios built around your real context, not generic slides.

• Tailored scenarios generated for your systems, roles and threat context
• Learn by doing — hands-on exercises, not passive presentations
• AI & security focus — responsible AI, governance, secure adoption
• Adaptable depth — from executives to technical teams
• Repeatable and updatable as tools and risks evolve

A practical, two-day course on AI security, governance and assurance for professionals who review, approve or assess AI systems — no coding required. Everything is practised in a hands-on lab, built around a realistic HR-assistant case study.

A repeatable five-step method — classify the architecture, build the system map, place controls and collect evidence, analyse threats and mitigations, then write the audit report and action plan.

Uses NIST AI RMF, OWASP for LLMs, MITRE ATLAS, GDPR and the EU AI Act as practical reference points — no need to memorise the frameworks.

Who should attend

• Internal and external auditors
• Risk, governance and compliance professionals
• Data-protection, privacy and responsible AI teams
• Business managers and AI system owners
• Procurement and third-party risk professionals
• IT, security and architecture professionals seeking an assurance perspective

Ideal for mixed groups of technical and non-technical participants.

What you'll be able to do

• Map an AI system: users, data, components and trust boundaries
• Recognise security, privacy, fairness and governance risks
• Evaluate controls and audit evidence across the AI lifecycle
• Observe live control-failure demonstrations in the lab
• Produce a concise AI Security & Governance Assessment with remediation priorities

Programme at a glance

A lab-first, scenario-based workshop: you take on the role of the IT Manager at Contoso and work through 70+ guided, hands-on exercises connected by one continuous storyline — onboarding, securing and governing a brand-new department from the ground up.

Every lab is triggered by a realistic business event — an HR request, a manager needing autonomy, a CISO policy requirement or an urgent support ticket. You configure the solution in a live Microsoft 365 environment, then sign in as the manager and employee to prove it works.

Who should attend

• IT administrators and IT managers responsible for Microsoft 365 operations
• Identity, security and collaboration administrators
• Systems engineers moving from on-premises to Microsoft Entra and cloud services
• Consultants and support professionals who provision, delegate and secure Microsoft 365 workloads

Prerequisites: working knowledge of Microsoft 365 admin portals and basic identity/MFA concepts. PowerShell and Conditional Access exposure helpful but not required.

What you'll build in the labs

• Just-in-time admin access with Microsoft Entra PIM and Access Packages
• Delegated administration with custom roles and Administrative Units
• Tested Conditional Access with named locations, Terms of Use and authentication strengths
• A secure SharePoint onboarding site with sensitivity labels and governed Teams policies
• Hardened Exchange Online, Microsoft 365, Office and Edge policies
• Entra ID Governance access packages, lifecycle workflows and access reviews
• Microsoft Intune device configuration, compliance and enrollment

Programme at a glance

A scenario-based security workshop built around one realistic, evolving incident. As a Security Analyst on the Contoso team, you investigate a connected attack chain across Microsoft 365 — from a phishing email through identity compromise, application persistence, sensitive-data access, cloud exfiltration and endpoint persistence — before delivering an executive incident briefing.

The focus is evidence, decision-making and CISO-ready recommendations. A guiding principle runs throughout: prove what is connected and what is separate — distinguishing exposure from interaction, interaction from compromise, and alerts from confirmed data loss.

Who should attend

• Security analysts and SOC team members
• Microsoft 365 security administrators and identity or security engineers
• Incident responders and threat hunters new to the Microsoft 365 security stack
• IT professionals moving into detection, response and evidence-based reporting

Prerequisites: working knowledge of Microsoft 365 admin portals and core security concepts. Defender and Conditional Access exposure helpful but not required.

What you'll investigate in the labs

• Security posture recon with Secure Score and Threat Analytics
• A phishing campaign with Defender for Office 365 — scope and containment
• Suspicious sign-ins and TAP/MFA recovery abuse — compromise vs attempt
• A risky OAuth consent grant and application persistence
• Device-trust abuse and SharePoint Finance data access
• Cloud exfiltration and Endpoint DLP response
• RDP access and endpoint persistence in Defender for Endpoint
• The CISO briefing — turning evidence into an executive incident story

Programme at a glance