CompTIA SecAI+ Domain 4.3 AI Security GRC
from ConvoCourses Hosted by Bruce Brown
CompTIA SecAI+ (CY0-001) — Domain 4.3: The Impact of Compliance on AI Domain 4.0 (AI Governance, Risk, and Compliance) is 19% of the exam, and objective 4.3 is where governance meets the real world: the laws, standards, and internal policies that decide how your organization is allowed to build and use AI. In this session we break down the major frameworks in plain English and show you how CompTIA tests them — usually as "which framework/policy applies to this scenario?" questions rather than memorization. What's covered: EU AI Act — the first comprehensive AI law, its risk-based tiers, transparency/labeling rules, and why its reach extends beyond Europe OECD AI Principles — the values-based standards (human-centered, transparent, accountable) that shaped many national policies ISO AI standards — ISO/IEC 42001:2023, the "AI management system" standard (think ISO 27001 for AI) NIST AI Risk Management Framework (AI RMF) — the voluntary U.S. framework and its Govern / Map / Measure / Manage functions Corporate policies — sanctioned vs. unsanctioned AI (shadow AI), private vs. public models, and sensitive data governance Third-party compliance evaluations — validating vendors and external AI providers Data sovereignty — why where your data lives determines which laws apply Exam angle: know what each framework is for and who it applies to. Binding law (EU AI Act) vs. voluntary framework (NIST AI RMF) vs. certifiable standard (ISO 42001) is a distinction the exam loves to test.
Embed this episode
No transcript yet.