A pragmatic roadmap for the IT manager or compliance coordinator who needs to translate the EU AI Act into action without a dedicated compliance team. The 20 things, prioritisation, and what is realistic.
The eight Annex III categories explained with concrete examples from Nordic midmarket. When is your recruitment tool, credit scoring, or OT system high-risk under the EU AI Act?
What must an AI policy contain? The eight mandatory sections, common mistakes, and what separates a policy that is actually used from one that lives in a PDF folder nobody opens.
The difference and overlap between GDPR's DPIA and the AI Act's FRIA. When do you need which, who is responsible, and how do you avoid duplication with a coordinated workflow?
How to build an AI inventory from scratch. The discovery process, 15 questions per system, often-overlooked AI systems (Copilot, Shadow AI), and when to move from spreadsheet to a dedicated tool.
You don't need an AI ethics board. You need a register, a risk classification, a decision matrix, and a one-pager. Two weeks, four deliverables.
All topics