AI Literacy and Training Standard
Ensure all staff dealing with AI systems have appropriate AI literacy.
2
Controls
0
Compliant
2
In Progress
0
Not Started
AI Literacy and Training Standard
Document Type: Standard
Standard ID: STD-AI-014
Standard Title: AI Literacy and Training Standard
Version: 1.0
Effective Date: 2025-08-01
Next Review Date: 2026-08-01
Review Frequency: Annually or upon regulatory change
Parent Policy: POL-AI-001 - Artificial Intelligence Policy
Owner: HR Director
Approved By: AI Governance Committee Chair
Status: Draft
Classification: Internal Use Only
TABLE OF CONTENTS
- Document History
- Objective
- Scope and Applicability
- Control Standard
- Supporting Procedures
- Compliance
- Roles and Responsibilities
- Exceptions
- Enforcement
- Key Performance Indicators (KPIs)
- Training Requirements
- Definitions
- Link with AI Act and ISO42001
DOCUMENT HISTORY
| Version | Date | Author | Changes | Approval Date | Approved By |
|---|---|---|---|---|---|
| 0.1 | 2025-07-20 | HR Director | Initial draft | - | - |
| 0.2 | 2025-08-01 | HR Director | Added Article 4/Recital 106 details | - | - |
| 0.3 | 2025-08-01 | HR Director | Incorporated stakeholder feedback | - | - |
| 1.0 | 2025-08-01 | HR Director | Final version approved - GRC restructured | 2025-07-25 | Jane Doe, AI Governance Committee Chair |
OBJECTIVE
This standard defines requirements for ensuring all staff dealing with AI systems have appropriate AI literacy and training in compliance with EU AI Act Article 4 and Recital 106.
Primary Goals:
- Develop comprehensive AI literacy program
- Deliver training and track completion
- Assess and verify AI competency
- Ensure ongoing development and continuous learning
SCOPE AND APPLICABILITY
2.1 Mandatory Applicability
This standard is mandatory for:
- All staff working with AI systems
- All staff involved in AI development, deployment, or oversight
- All personnel with AI-related responsibilities
2.2 Recommended Applicability
This standard is recommended for:
- All employees (general AI awareness)
- Contractors and third parties working with AI systems
2.3 Training Requirements Covered
- AI literacy program development
- Training curriculum and content
- Training delivery and tracking
- Competency assessment
- Ongoing development
2.4 Out of Scope
- General IT training (covered by IT training programs)
- Non-AI system training (covered by other training standards)
- Training outside EU AI Act scope
CONTROL STANDARD
Control LIT-001: AI Literacy Training Curriculum Development
Control ID: LIT-001
Control Name: AI Literacy Training Curriculum and Content Development
Control Type: Preventive
Control Frequency: Initial development, annual review
Risk Level: Medium
Control Objective
Develop comprehensive AI literacy training curriculum with appropriate content for different roles and competency levels to ensure all staff have necessary AI knowledge and skills.
Control Requirements
CR-001.1: Training Curriculum Development
Develop training curricula for different competency levels.
Training Levels:
| Level | Audience | Content | Duration | Assessment |
|---|---|---|---|---|
| Level 1: AI Awareness | All employees | AI basics, EU AI Act overview, prohibited practices | 2 hours | Knowledge check (≥80%) |
| Level 2: AI User | AI system users | How to use AI systems, limitations, human oversight | 4 hours | Knowledge check (≥80%) + Practical exercise |
| Level 3: AI Professional | AI developers, data scientists | Technical AI, EU AI Act compliance, risk management | 16 hours | Written exam (≥90%) + Practical exercise |
| Level 4: AI Governance | AI Governance Committee, executives | Strategic AI, governance, compliance oversight | 8 hours | Written exam (≥90%) |
Mandatory Actions:
- Develop training curricula for all levels
- Create training materials
- Obtain subject matter expert review
- Pilot training
- Refine based on feedback
- Review and update annually
CR-001.2: Training Content Development
Develop comprehensive training content covering core and role-specific topics.
Core Topics (All Levels):
| Topic | Description | Coverage Level |
|---|---|---|
| AI Fundamentals | AI basics, capabilities, limitations | All levels |
| EU AI Act Overview | Regulation overview, key requirements | All levels |
| Prohibited Practices | Article 5 prohibited practices | All levels |
| High-Risk AI Requirements | Requirements for high-risk AI | Level 2+ |
| Risk Management | Risk assessment and management | Level 3+ |
| Data Governance and Bias | Data quality, bias mitigation | Level 3+ |
| Human Oversight | Human oversight requirements | Level 2+ |
| Transparency Obligations | Transparency and explainability | Level 2+ |
| Incident Reporting | Incident detection and reporting | Level 2+ |
| Ethical AI Principles | Ethical AI, fairness, accountability | All levels |
Role-Specific Topics:
| Role | Additional Topics | Training Level |
|---|---|---|
| Developers | Technical requirements, testing, documentation | Level 3 |
| Data Scientists | Data quality, bias mitigation, fairness | Level 3 |
| Product Managers | Classification, conformity assessment, registration | Level 3 |
| Legal | Compliance, contracts, liability | Level 3 |
| Executives | Governance, strategy, oversight | Level 4 |
Mandatory Actions:
- Define core and role-specific content
- Develop training modules
- Create assessments
- Update content regularly
- Review annually
Evidence Required:
- Training curricula
- Training materials
- Training content library
- Training modules
- Assessments
- Review records
- Pilot feedback
Audit Verification:
- Verify training curricula developed for all levels
- Confirm training content covers all required topics
- Check subject matter expert review conducted
- Validate training piloted and refined
- Verify annual review completed
Control LIT-002: Training Delivery
Control ID: LIT-002
Control Name: AI Literacy Training Delivery
Control Type: Preventive
Control Frequency: Per training session, ongoing
Risk Level: Medium
Control Objective
Deliver AI literacy training using appropriate methods to ensure all staff receive required training and achieve competency.
Control Requirements
CR-002.1: Training Delivery Methods
Deliver training using appropriate methods for different audiences.
Delivery Methods:
| Method | Description | When to Use | Advantages |
|---|---|---|---|
| In-Person Training | Classroom-based training | Initial training, complex topics | Interactive, hands-on |
| Virtual Instructor-Led | Online live training | Remote teams, flexible scheduling | Accessible, interactive |
| E-Learning Modules | Self-paced online training | Refresher, awareness training | Flexible, scalable |
| On-the-Job Training | Practical training in workplace | Skill application, mentoring | Practical, contextual |
| Workshops and Seminars | Interactive sessions | Updates, advanced topics | Collaborative, engaging |
Mandatory Actions:
- Schedule training sessions
- Deliver training per curriculum
- Track attendance
- Conduct assessments
- Issue certificates
- Document delivery
Training Delivery Schedule:
| Training Level | Initial Training | Refresher Training | Update Training |
|---|---|---|---|
| Level 1: AI Awareness | At onboarding | Annually | As needed |
| Level 2: AI User | Before using AI systems | Annually | When new AI systems introduced |
| Level 3: AI Professional | Before AI work | Annually | When regulations change |
| Level 4: AI Governance | At appointment | Annually | When regulations change |
Evidence Required:
- Training schedule
- Attendance records
- Assessment results
- Training certificates
- Delivery records
Audit Verification:
- Verify training delivered per schedule
- Confirm attendance tracked
- Check assessments conducted
- Validate certificates issued
Control LIT-003: Training Tracking and Completion
Control ID: LIT-003
Control Name: Training Completion Tracking and Monitoring
Control Type: Detective
Control Frequency: Continuous, quarterly reviews
Risk Level: Medium
Control Objective
Track training completion and monitor training effectiveness to ensure all staff complete required training and training achieves its objectives.
Control Requirements
CR-003.1: Training Tracking
Track training completion and effectiveness.
Tracking Requirements:
| Requirement | Description | Measurement | Target |
|---|---|---|---|
| Training Completion | Track who completed training | % completed | 100% |
| Assessment Scores | Track assessment performance | Average score | ≥90% |
| Training Effectiveness | Monitor training effectiveness | Effectiveness score | ≥4.0/5.0 |
| Training Gaps | Identify training gaps | Gap analysis | Address gaps |
| Training Metrics | Report training metrics | Metrics dashboard | Quarterly |
Mandatory Actions:
- Maintain training records
- Track completion rates
- Monitor assessment scores
- Monitor training effectiveness
- Identify training gaps
- Generate reports
- Address gaps
Training Records:
| Record Type | Content | Retention | Access |
|---|---|---|---|
| Training Attendance | Who attended, when | 10 years | HR, Managers |
| Assessment Scores | Assessment results | 10 years | HR, Managers |
| Training Certificates | Certificates issued | 10 years | HR, Employees |
| Competency Records | Competency levels | 10 years | HR, Managers |
| Training Transcripts | Individual training history | 10 years | HR, Employees |
Evidence Required:
- Training management system records
- Completion reports
- Effectiveness metrics
- Gap analysis
- Training reports
Audit Verification:
- Verify training records maintained
- Confirm completion tracked
- Check effectiveness monitored
- Validate gaps identified and addressed
Control LIT-004: Competency Assessment
Control ID: LIT-004
Control Name: AI Competency Assessment and Verification
Control Type: Detective
Control Frequency: Per training, annually
Risk Level: Medium
Control Objective
Assess and verify AI competency to ensure staff have appropriate knowledge and skills for their roles.
Control Requirements
CR-004.1: Competency Assessment Methods
Conduct competency assessments using appropriate methods.
Assessment Methods:
| Method | Description | When to Use | Success Criteria |
|---|---|---|---|
| Written Exams | Knowledge assessment | After training | ≥90% for Level 3+, ≥80% for others |
| Practical Exercises | Skill application | After training | Successful completion |
| Case Studies | Scenario-based assessment | Advanced training | Correct analysis |
| On-the-Job Observations | Workplace competency | Ongoing | Meets competency criteria |
| Peer Reviews | Peer assessment | Advanced roles | Positive feedback |
Competency Levels:
| Level | Description | Requirements | Assessment |
|---|---|---|---|
| Basic | Understands AI fundamentals and EU AI Act basics | Level 1 training completed | Knowledge check passed |
| Intermediate | Can apply AI knowledge in role | Level 2-3 training completed | Assessment passed + practical exercise |
| Advanced | Can lead AI initiatives and ensure compliance | Level 3 training completed + experience | Exam passed + demonstrated competency |
| Expert | Can provide guidance and training to others | Level 3-4 training completed + extensive experience | Advanced assessment + peer recognition |
Mandatory Actions:
- Conduct competency assessments
- Evaluate results
- Provide feedback
- Identify development needs
- Track competency levels
- Update competency records
Evidence Required:
- Assessment records
- Competency evaluations
- Development plans
- Competency tracking records
Audit Verification:
- Verify competency assessments conducted
- Confirm results evaluated
- Check development needs identified
- Validate competency levels tracked
Control LIT-005: Ongoing Development and Continuous Learning
Control ID: LIT-005
Control Name: Ongoing AI Training and Development
Control Type: Preventive
Control Frequency: Ongoing, annually
Risk Level: Low
Control Objective
Provide ongoing development and continuous learning opportunities to ensure staff maintain and enhance AI competency.
Control Requirements
CR-005.1: Ongoing Development
Provide ongoing development opportunities.
Ongoing Development Requirements:
| Requirement | Description | Frequency | Implementation |
|---|---|---|---|
| Annual Refresher Training | Refresher training on core topics | Annually | Refresher courses |
| Regulatory Update Training | Training on regulatory changes | When regulations change | Update sessions |
| New AI System Training | Training on new AI systems | When new systems introduced | System-specific training |
| Continuous Learning | Ongoing learning opportunities | Ongoing | Learning resources |
| Professional Development | Professional development programs | Ongoing | Development programs |
Mandatory Actions:
- Provide annual refresher training
- Communicate regulatory updates
- Offer training on new AI systems
- Provide continuous learning opportunities
- Support professional development
- Track ongoing learning
Continuous Learning Resources:
| Resource Type | Description | Access | Frequency |
|---|---|---|---|
| E-Learning Library | Online training modules | All staff | Ongoing |
| Knowledge Base | AI knowledge articles | All staff | Ongoing |
| Webinars | Live training sessions | All staff | Monthly |
| Newsletters | AI updates and news | All staff | Monthly |
| Communities of Practice | Peer learning groups | Interested staff | Ongoing |
Evidence Required:
- Refresher training records
- Update communications
- Development activity logs
- Learning resource usage
- Professional development records
Audit Verification:
- Verify refresher training provided
- Confirm regulatory updates communicated
- Check continuous learning opportunities available
- Validate ongoing learning tracked
SUPPORTING PROCEDURES
This standard is implemented through the following detailed procedures:
Procedure PROC-AI-LIT-001: AI Literacy Training Program Procedure
Purpose: Define step-by-step process for AI literacy training program
Owner: HR Director
Implements: Controls LIT-001, LIT-002, LIT-003
Procedure Steps:
- Develop training curriculum - Control LIT-001
- Develop training content
- Deliver training - Control LIT-002
- Track training completion - Control LIT-003
- Monitor effectiveness
- Update program
Outputs:
- Training curricula
- Training materials
- Training delivery records
- Completion reports
Procedure PROC-AI-LIT-002: Competency Assessment Procedure
Purpose: Define process for competency assessment
Owner: HR Director
Implements: Controls LIT-004, LIT-005
Procedure Steps:
- Conduct competency assessments - Control LIT-004
- Evaluate results
- Identify development needs
- Provide ongoing development - Control LIT-005
- Track competency
Outputs:
- Assessment records
- Competency evaluations
- Development plans
COMPLIANCE
5.1 Compliance Monitoring
Monitoring Approach: Continuous automated monitoring supplemented by monthly manual reviews and quarterly comprehensive audits.
Compliance Metrics:
| Metric | Target | Measurement Method | Frequency | Owner |
|---|---|---|---|---|
| Training Completion Rate | 100% | % of staff completing required training | Quarterly | HR Director |
| Assessment Pass Rate | ≥90% | % passing assessments on first attempt | Per training | HR Director |
| Training Effectiveness | ≥4.0/5.0 | Training effectiveness score | Per training | HR Director |
| Competency Level | ≥Intermediate | Average competency level | Annually | HR Director |
| Refresher Training Completion | 100% | % completing annual refresher | Annually | HR Director |
Monitoring Tools:
- Training Management System
- Training Dashboard
- Compliance Reports
- Monthly compliance reports
- Quarterly AI Governance Committee reviews
5.2 Internal Audit Requirements
Audit Frequency: Annually (minimum)
Audit Scope:
- Training program completeness
- Training delivery quality
- Training completion rates
- Competency assessment effectiveness
- Ongoing development coverage
- Controls effectiveness (LIT-001 through LIT-005)
Audit Activities:
- Review 100% of training programs
- Sample 20% of training sessions for quality review
- Test training tracking system
- Review competency assessments
- Interview staff on training effectiveness
Audit Outputs:
- Annual AI Literacy and Training Audit Report
- Findings and recommendations
- Corrective action plans for deficiencies
5.3 External Audit / Regulatory Inspection
Preparation:
- Maintain audit-ready training documentation at all times
- Designate HR Director and Legal as regulatory liaisons
- Prepare standard response procedures for authority requests
Provide to Auditors/Regulators:
- Training curricula
- Training records
- Competency assessments
- Training effectiveness reports
- Internal audit reports
- Evidence of controls execution
Authority Request Response:
- Acknowledge request within 1 business day
- Provide requested documentation within 5 business days
- Coordinate through Legal and HR Director
- Document all interactions with authorities
ROLES AND RESPONSIBILITIES
6.1 RACI Matrix
| Activity | HR Director | Training | Managers | AI Act Program Manager | Subject Matter Experts |
|---|---|---|---|---|---|
| Training Curriculum Development | R/A | R | C | C | R |
| Training Content Development | R | R | C | C | R |
| Training Delivery | R | R | C | I | C |
| Training Tracking | R | R | A | I | I |
| Competency Assessment | R | R | A | C | C |
| Ongoing Development | R | R | A | I | C |
RACI Legend:
- R = Responsible (does the work)
- A = Accountable (ultimately answerable)
- C = Consulted (provides input)
- I = Informed (kept up-to-date)
6.2 Role Descriptions
HR Director
- Primary Responsibility: Owns AI literacy and training framework, ensures compliance
- Key Activities:
- Establishes training framework
- Oversees training program
- Monitors training effectiveness
- Reports to management
- Required Competencies: Training management, EU AI Act Article 4, competency assessment
Training
- Primary Responsibility: Develops and delivers training
- Key Activities:
- Develops training curricula
- Creates training materials
- Delivers training
- Tracks completion
- Required Competencies: Training development, instructional design, training delivery
Managers
- Primary Responsibility: Accountable for their staff's training completion
- Key Activities:
- Ensures staff complete training
- Monitors competency
- Supports development
- Required Competencies: People management, training awareness
AI Act Program Manager
- Primary Responsibility: Provides AI Act expertise for training
- Key Activities:
- Reviews training content
- Provides subject matter expertise
- Ensures regulatory accuracy
- Required Competencies: EU AI Act expertise, training content review
Subject Matter Experts
- Primary Responsibility: Provides technical expertise for training
- Key Activities:
- Reviews training content
- Provides expertise
- Delivers specialized training
- Required Competencies: AI expertise, domain knowledge
EXCEPTIONS
7.1 Exception Philosophy
AI literacy and training is a critical compliance activity for staff working with AI systems. Exceptions are granted restrictively and only where compensating controls adequately mitigate risks.
7.2 Allowed Exceptions
The following exceptions may be granted with proper justification and approval:
| Exception Type | Justification Required | Maximum Duration | Approval Authority | Compensating Controls |
|---|---|---|---|---|
| Extended Training Timeline | Resource constraints prevent timely training | 30 days | HR Director | Interim supervision; Accelerated plan |
| Alternative Training Method | Alternative method equally effective | Permanent | HR Director | Document rationale; Effectiveness verification |
7.3 Prohibited Exceptions
The following exceptions cannot be granted under any circumstances:
❌ Skipping training for AI staff - Mandatory per Article 4, no exceptions
❌ Skipping competency assessment - Required to verify competency
❌ Skipping refresher training - Required for ongoing competency
7.4 Exception Request Process
Step 1: Submit Exception Request
- Complete Exception Request Form (FORM-AI-EXCEPTION-001)
- Include business justification
- Propose compensating controls
- Specify duration requested
- Attach risk assessment
Step 2: Risk Assessment
- HR Director assesses risk of granting exception
- Evaluates adequacy of compensating controls
- Documents residual risk
Step 3: Approval
- Route to appropriate approval authority based on exception type
- HR Director approval: Minor exceptions
- HR Director + AI Governance Committee: Significant exceptions
- AI Governance Committee: Critical exceptions
Step 4: Documentation and Monitoring
- Document exception in Exception Register
- Assign exception owner
- Set review date
- Monitor compensating controls
- Report exceptions quarterly to AI Governance Committee
Step 5: Exception Review and Closure
- Review exception at specified review date
- Assess if exception still needed
- Close exception when normal training completed
- Document lessons learned
ENFORCEMENT
8.1 Non-Compliance Consequences
| Violation | Severity | Consequence | Remediation Required |
|---|---|---|---|
| Staff working with AI without training | Critical | Immediate suspension from AI work until trained | Complete training within 5 business days |
| Training not completed on time | High | Escalation to manager | Complete training within 10 business days |
| Competency assessment not passed | High | Retraining required | Retrain and reassess within 10 business days |
| Refresher training not completed | Medium | Written warning | Complete refresher within 15 business days |
8.2 Escalation Procedures
Level 1: HR Director
- Minor procedural violations
- Training delays < 5 days
- Action: Written warning, corrective action required
Level 2: HR Director + AI Governance Committee
- Repeated violations
- Staff working without training
- Action: Formal review, corrective action plan, management notification
Level 3: AI Governance Committee
- Critical compliance failures
- Multiple staff without training
- Action: Immediate suspension, investigation, disciplinary action
Level 4: Executive Management + Legal
- Potential regulatory enforcement action
- Significant legal liability
- Reputational risk
- Action: Executive crisis management, legal strategy, regulatory engagement
8.3 Immediate Escalation Triggers
Escalate immediately to AI Governance Committee + Legal if:
- ⚠️ Staff working with high-risk AI without required training
- ⚠️ Regulatory inquiry or inspection related to training
- ⚠️ Critical training failure affecting compliance
8.4 Disciplinary Actions
Individuals responsible for training violations may be subject to:
- Verbal or written warning
- Mandatory retraining
- Performance improvement plan
- Reassignment of responsibilities
- Suspension (with pay during investigation)
- Termination (for egregious violations, e.g., knowingly allowing untrained staff to work with AI)
Factors Considered:
- Intent (knowing violation vs. honest mistake)
- Severity of violation
- Impact (actual or potential)
- Cooperation with remediation
- Prior violation history
KEY PERFORMANCE INDICATORS (KPIs)
9.1 AI Literacy and Training KPIs
| KPI ID | KPI Name | Definition | Target | Measurement Method | Frequency | Owner | Reporting To |
|---|---|---|---|---|---|---|---|
| KPI-LIT-001 | Training Completion Rate | % of staff completing required training | 100% | (# completed / # required) × 100 | Quarterly | HR Director | AI Governance Committee |
| KPI-LIT-002 | Assessment Pass Rate | % passing assessments on first attempt | ≥90% | (# passed / # total) × 100 | Per training | HR Director | Management |
| KPI-LIT-003 | Training Effectiveness | Training effectiveness score | ≥4.0/5.0 | Average effectiveness score | Per training | HR Director | Management |
| KPI-LIT-004 | Competency Level | Average competency level | ≥Intermediate | Average competency level | Annually | HR Director | AI Governance Committee |
| KPI-LIT-005 | Refresher Training Completion | % completing annual refresher | 100% | (# completed / # required) × 100 | Annually | HR Director | Management |
| KPI-LIT-006 | Training Timeliness | % completing training on time | ≥95% | (# on time / # total) × 100 | Quarterly | HR Director | Management |
| KPI-LIT-007 | Competency Assessment Coverage | % of staff with competency assessment | 100% | (# assessed / # total staff) × 100 | Annually | HR Director | Management |
9.2 KPI Dashboards and Reporting
Real-Time Dashboard (HR Director access)
- Current training completion status
- Assessment pass rates
- Training effectiveness scores
- Competency levels
- Training gaps
Monthly Management Report
- KPI-LIT-001, 002, 003, 006
- Trend analysis (vs. previous month)
- Issues and risks
- Planned actions
Quarterly AI Governance Committee Report
- All KPIs
- Training effectiveness assessment
- Competency assessment review
- Internal audit findings (if conducted)
- Exception register review
Annual Executive Report
- Full-year KPI performance
- Training maturity assessment
- Strategic recommendations
- Regulatory outlook
9.3 KPI Thresholds and Alerts
| KPI | Green (Good) | Yellow (Warning) | Red (Critical) | Alert Action |
|---|---|---|---|---|
| Training Completion Rate | 100% | 95-99% | < 95% | Red: Immediate escalation to AI Governance Committee Chair |
| Assessment Pass Rate | ≥90% | 85-89% | < 85% | Red: Escalate to AI Governance Committee |
| Training Effectiveness | ≥4.0/5.0 | 3.5-3.9 | < 3.5 | Yellow: Improvement plan; Red: Escalate to AI Governance Committee |
| Competency Level | ≥Intermediate | Basic-Intermediate | < Basic | Red: Escalate to AI Governance Committee |
TRAINING REQUIREMENTS
10.1 Training Program Overview
All personnel involved in AI literacy and training must complete role-specific training to ensure competency in training development, delivery, and assessment.
10.2 Role-Based Training Requirements
| Role | Training Course | Duration | Content | Frequency | Assessment Required |
|---|---|---|---|---|---|
| HR Director | Training Management Expert Training | 16 hours | Training management; Competency assessment; EU AI Act Article 4 | Initial + annually | Yes - Written exam (≥90%) |
| Training Staff | Training Development Training | 12 hours | Training development; Instructional design; Training delivery | Initial + annually | Yes - Practical exercise |
| Managers | Training Management Overview | 4 hours | Training requirements; Responsibilities; Staff development | At onboarding + annually | Yes - Knowledge check (≥80%) |
| All Staff | AI Awareness (Level 1) | 2 hours | AI basics; EU AI Act overview | At onboarding + annually | Yes - Knowledge check (≥80%) |
10.3 Training Content by Topic
Training Management
- Training program development
- Training delivery methods
- Training effectiveness measurement
- Competency assessment
EU AI Act Article 4
- Deployer obligations
- Training requirements
- Compliance obligations
Competency Assessment
- Assessment methods
- Competency levels
- Development planning
10.4 Training Delivery Methods
Initial Training:
- Instructor-led classroom or virtual training
- Includes interactive exercises and case studies
- Hands-on practice with training tools
- Group discussions of complex scenarios
Annual Refresher:
- E-learning modules for core content review
- Live update sessions for regulatory changes
- Case study reviews of recent training activities
- Knowledge assessment
On-the-Job Training:
- Mentoring for new training staff
- Job shadowing during training delivery
- Supervised training development for first 3 programs
Just-in-Time Training:
- Quick reference guides and job aids
- Video tutorials on specific topics
- Help desk support from experienced staff
10.5 Training Effectiveness Measurement
Assessment Methods:
- Written exams for knowledge retention
- Practical exercises for skill application
- On-the-job observations for competency validation
- Feedback surveys for training quality
Competency Validation:
- Training Staff: Must demonstrate ability to develop and deliver 1 sample training program with 100% effectiveness before independent work
- All staff: Must pass knowledge assessments with minimum required scores
Training Metrics:
| Metric | Target | Frequency |
|---|---|---|
| Training completion rate | 100% | Quarterly |
| Assessment pass rate (first attempt) | ≥ 90% | Per training |
| Training effectiveness score (survey) | ≥ 4.0/5.0 | Per training |
| Time to competency (Training Staff) | < 45 days | Per person |
10.6 Training Records
Records Maintained:
- Training attendance records
- Assessment scores
- Competency validations
- Refresher training completion
- Individual training transcripts
Retention: 10 years (to align with EU AI Act documentation retention)
Access: HR, Managers, Internal Audit, Competent Authorities (upon request)
DEFINITIONS
| Term | Definition | Source |
|---|---|---|
| AI Literacy | Knowledge and understanding of AI systems and their implications | EU AI Act Article 4 |
| Training | Structured learning activities to develop AI knowledge and skills | This Standard |
| Competency | Demonstrated ability to apply AI knowledge and skills | This Standard |
| Competency Level | Level of AI competency (Basic, Intermediate, Advanced, Expert) | This Standard |
| Refresher Training | Training to maintain and update AI knowledge | This Standard |
LINK WITH AI ACT AND ISO42001
12.1 EU AI Act Regulatory Mapping
This standard implements the following EU AI Act requirements:
| EU AI Act Provision | Article | Requirement Summary | Implemented By (Controls) |
|---|---|---|---|
| AI Literacy | Article 4 | Deployer obligations for AI literacy | All controls (LIT-001 through LIT-005) |
| Staff Training | Recital 106 | Training requirements for staff | All controls |
12.2 ISO/IEC 42001:2023 Alignment
This standard aligns with ISO/IEC 42001:2023 as follows:
| ISO 42001 Clause | Requirement | Implementation in This Standard |
|---|---|---|
| Clause 7.2: Competence | Ensure personnel have appropriate competence | LIT-001, LIT-002, LIT-004 |
| Clause 7.3: Awareness | Ensure personnel are aware | LIT-001, LIT-002 |
12.3 Relationship to Other Standards
This AI literacy and training standard integrates with other AI Act standards:
| Related Standard | Integration Point | Rationale |
|---|---|---|
| STD-AI-001: Classification | Training on classification requirements | Staff need to understand classification |
| STD-AI-002: Risk Management | Training on risk management | Staff need risk management skills |
| STD-AI-007: Human Oversight | Training on human oversight | Oversight personnel need specific training |
| STD-AI-013: Incident Management | Training on incident reporting | Staff need to know how to report incidents |
12.4 References and Related Documents
EU AI Act (Regulation (EU) 2024/1689):
- Article 4: AI Literacy
- Recital 106: Staff Training
ISO/IEC Standards:
- ISO/IEC 42001:2023: Information technology — Artificial intelligence — Management system
Internal Documents:
- POL-AI-001: Artificial Intelligence Policy (parent policy)
- STD-AI-001: AI System Classification Standard
- STD-AI-002: AI Risk Management Standard
- STD-AI-007: AI Human Oversight Standard
- STD-AI-013: AI Incident Management Standard
- PROC-AI-LIT-001, -002: AI literacy and training procedures
APPROVAL AND AUTHORIZATION
| Role | Name | Title | Signature | Date |
|---|---|---|---|---|
| Prepared By | HR Director | HR Director | _________________ | ________ |
| Reviewed By | Sarah Johnson | AI Act Program Manager | _________________ | ________ |
| Reviewed By | Jane Doe | Chief Strategy & Risk Officer | _________________ | ________ |
| Approved By | Jane Doe | AI Governance Committee Chair | _________________ | ________ |
Effective Date: 2025-08-01
Next Review Date: 2026-08-01
Review Frequency: Annually or upon regulatory change
END OF STANDARD STD-AI-014
This standard is a living document. Feedback and improvement suggestions should be directed to the HR Director.
Standard ID
STD-AI-014
Version
1.0
Status
draftOwner
HR Director
Effective Date
2025-08-01
Applicability
All staff involved with AI systems