Workshop — ARISE Foundations
You Cannot Protect
What You Haven’t Defined.
The ARISE workshop is a structured engagement that explains and upskills your team on the six governance controls every organization must have.
The Challenge
Most programs build on a foundation that was never laid.
Organizations invest in tools, frameworks, and compliance programs while skipping the foundational governance controls those investments depend on. Without defined risk appetite, data ownership, and AI inventory, every downstream control operates in a vacuum.
The ARISE Foundations Workshop closes that gap in a single working session — producing board-ratified artifacts, quantitative tolerance metrics, and a living AI registry before any other governance effort begins.
What breaks without this foundation
The Foundation
Six Controls. One Session. An Operational Foundation.
Every control follows the ARISE Implement → Operate → Validate methodology — producing enforceable policy.
G.RM-02 · Govern Domain
Risk Appetite & Tolerance
Board-ratified thresholds — eliminating human latency from the enforcement loop.
Foundational
G.GV.P-09 · Govern Domain
Data-Governance Policies
Establish ownership, classification, AI data intake, and retention enforced automatically. Every critical dataset assigned a named owner before any AI pipeline is approved.
Foundational
G.GV.S-02 · Govern Domain
Security Standards
Documented security baselines linked directly to risk register entries to ensure control selection is justified by specific, measurable exposure rather than convention.
Foundational
G.PR-01 · Govern Domain
Privacy Program
Learn about workflows, breach notification, and RoPA maintenance.
Foundational
G.RM-01 · Govern Domain
Risk Management Framework
ISO-aligned ERM with modeling for top-tier risks — support the ability to produce defensible risk understanding for leadership decisions.
Foundational
G.ST.S-01 · Govern Domain
AI Scope & Inventory
A living registry established to document AI systems, assign risk tiers, and ownership.
Operational
The Outcomes
What You Walk Away With
Understanding Risk Appetite Statement
Learn how to develop a Risk Appetite Statement with quantitative KRIs, tolerance thresholds per domain, and delegation of authority tiers
Awareness of the Operational Privacy & Data Governance Stack
Understand privacy, consent management platform configuration, DSAR workflows, and breach notifications
Knowing Foundational Requirements
Learn to ensure AI systems are registered before production access, risk tiers are assigned, shadow AI monitoring is active, and stage-gate enforcement is configured in the pipeline.
Understanding Evidence Expectations
Know how to build framework documents, register exports, committee minutes, KPI dashboards, and FAIR model outputs
Governance Starts With Definition. Start Here.
The ARISE Foundations Workshop will upskill your team on the six controls that every other investment depends on and teach them how to build an operational governance foundation.