What it is
A focused, full-day workshop for professionals responsible for governing, assuring or supporting organisational cybersecurity and AI risk. Dr John McCarthy works with participants to examine how cyber and AI risks should move through governance structures—from technical evidence and operational exposure to assurance, escalation, risk acceptance and executive decision.
Participants work with realistic governance papers, scenarios and decision exercises to identify weak accountability, test cyber and AI reporting, and strengthen board and committee oversight of responsible AI use and human decision-making. No technical cybersecurity or AI expertise is required. It is a practical governance workshop for professionals who must ensure that cyber and AI risks are understood, challenged, escalated and governed effectively.
Who should attend
- Company secretaries, governance professionals and committee secretariats
- Enterprise risk, operational risk and GRC professionals
- Internal audit, assurance, legal and regulatory compliance teams
- Data protection, information governance and cyber assurance professionals
- Business continuity, organisational resilience and third-party risk leaders
- Board advisers, non-executive directors and public-sector governance representatives
Participants do not require technical cybersecurity or AI expertise. The recommended group size is 6 people.
What the day includes
- The governance responsibility: What boards and governance functions should require from cyber and AI reporting
- Governance architecture mapping: Examining committees, accountabilities, escalation routes and delegated decision authority
- Reporting quality review: Identifying technical detail, ambiguity and missing business consequences in a sample cyber or AI paper
- Translation exercise: Converting technical evidence into exposed outcomes, material consequences and governance relevance
- Risk-acceptance exercise: Testing authority, evidence and risk-appetite context before risk is accepted or deferred
- AI governance: Responsible AI use, ownership, human oversight and the questions boards should ask
- Assurance mapping: Identifying the evidence governance bodies need and where assurance is fragmented, duplicated or absent
- Committee simulation: Determining what should be challenged, escalated, recorded or decided in a realistic cyber or AI scenario
- Governance improvement plan: Agreeing practical improvements participants can apply in their organisations
What you get
- A full-day workshop delivered personally by Dr John McCarthy
- Practical application of the Five-Layer Cyber Strategy Translation Framework
- Cyber and AI governance scenarios, reporting reviews and decision exercises
- A model for evaluating the quality of cyber and AI governance papers
- A structured set of cyber and AI questions for boards and governance committees
- Practical principles for cyber and AI risk escalation and acceptance
- A participant workbook and certificate of completion
Outcomes
By the end of the day, participants will be able to:
- Recognise whether cyber and AI reporting is genuinely decision-ready
- Challenge technical information without becoming cybersecurity or AI specialists
- Connect cyber and AI evidence to business outcomes and material consequences
- Identify unclear ownership, accountability, human oversight and decision authority
- Determine when cyber or AI risk requires escalation
- Test whether risk acceptance is properly authorised and evidenced
- Distinguish operational reporting from governance assurance
- Improve the quality of board and committee discussions and decisions
Right for you if
You work in governance, risk, audit, assurance, legal or compliance and are expected to oversee cybersecurity and AI use. Particularly valuable where cyber or AI reporting is highly technical, responsibilities overlap, risk acceptance is poorly evidenced, or AI use lacks clear ownership and human oversight. Build confidence in questioning senior and technical leaders. No technical cybersecurity or AI expertise is required.