AI Governance | AI Regulations, Controls & Operating Discipline- Zurich

A three-hour live masterclass on the controls and operating discipline that AI governance needs under the EU AI Act

Why attend now

The EU moved the deadlines, not the duty. Under the AI Omnibus adopted in June 2026, high-risk obligations now apply from 2 December 2027 for stand-alone uses such as credit scoring and recruitment, and from 2 August 2028 for AI built into regulated products. Transparency duties under Article 50 have applied since 2 August 2026, general-purpose AI obligations kept their original schedule, and watermarking for existing generative systems lands on 2 December 2026. Organisations that treat the delay as a pause will reach 2027 with a project plan. Those that spend the next fourteen months building their inventory, naming accountable owners and assembling evidence will reach it with a working system.

Asia is moving the same way on its own terms. Korea's AI Basic Act entered into force in January 2026, MAS has set out AI risk management expectations for financial institutions, and supervisors from Singapore to the Gulf now ask the same three questions: what AI do you run, who answers for it, and how do you know the controls work. The EU AI Act also reaches Asian firms whose AI systems or outputs are used in the EU, which places many APAC groups inside two regimes at once.

What makes this masterclass different

Most AI governance training stops at principles. This session starts where the work begins: one control set mapped across the EU AI Act, ISO/IEC 42001, the NIST AI RMF and the principal Asian frameworks, with every gap marked plainly where no direct mapping exists. Participants work a live case, watch a governance record take shape in the AIVARA 360 platform, and leave with templates they can put to use the following week. One session covers both regions, so a multinational can build its controls once and report against many regimes.

Agenda

The 2026 position. What applies today under the EU AI Act, what arrives in 2027 and 2028, and how Korea, Singapore, Japan and the Gulf compare.
Know your AI. Building the inventory, classifying risk, and settling provider and deployer roles, including general-purpose and third-party models.
Who decides. The governance operating model: board oversight, risk ownership, approval rights, and the four tests every risk acceptance must pass.
Break
Agentic AI and the vendor question. Mandate limits, human oversight and incident notification for AI agents, and why accountability cannot be handed to a vendor. Live case exercise.
Evidence that holds. What a regulator or auditor will ask to see, demonstrated live in AIVARA 360.
Priorities by maturity level, open Q&A, and the CorpStage certification pathway.

Who should attend

• Board directors and members of audit and risk committees
• Chief risk, compliance and legal officers, and data protection officers
• CIOs, CTOs, chief data officers and heads of AI who own deployments
• Internal auditors and assurance professionals
• Product and procurement leads buying third-party AI
• Consultants and advisers supporting clients on AI regulation

The session carries particular weight for banking, insurance, payments, healthcare, technology providers selling into the EU, and public sector bodies.

Your facilitators

Dr Nisha Kohli is Founder and CEO of CorpStage and advises boards, CFOs, banks and regulators on AI governance and ESG across Europe, the Gulf, India and Southeast Asia. She designed CorpStage's AI governance certification family (Certified AI Governance Lead, Certified AI Assurance Practitioner and Certified AI Risk Officer) and lectures on the Professional Masters in ESG at AIT Bangkok.

Ian Betts- Expert in Industry data, open standards, digital transformation and critical infrastructure