Secure AI Adoption for SMEs: Cybersecurity and the EU AI Act

This intermediate-level course helps Small and Medium-Sized Enterprises (SMEs) adopt artificial intelligence securely, responsibly, and in alignment with the EU AI Act. Designed for professionals involved in AI adoption, cybersecurity, compliance, management, and operational decision-making, the course provides practical guidance on managing AI-related risks while supporting innovation.

Through self-paced modules, realistic SME scenarios, knowledge checks, and practical examples, learners follow the journey of a fictional SME as it moves from informal AI use to structured and compliant adoption. The course explores AI Act roles and responsibilities, risk classification approaches, AI-specific cybersecurity threats, supplier due diligence, governance measures, monitoring practices, and incident response processes.

Participants learn how to identify AI systems used within their organisation, classify AI use cases according to the EU AI Act, assess cybersecurity risks such as data leakage, prompt injection, insecure integrations, excessive permissions, model manipulation, and over-reliance on AI outputs, and implement proportionate controls to reduce risk. The course also covers supplier assessment, procurement considerations, monitoring requirements, evidence collection, and practical compliance documentation.

By the end of the course, learners will be able to support secure AI adoption initiatives, apply AI governance principles, understand key obligations under the EU AI Act, and develop practical documentation that demonstrates responsible and secure AI deployment within SME environments.