Governance & Training
AI Literacy and Role-Based Training
What this control does
Support proportionate AI literacy for personnel who operate, use, oversee or make decisions involving AI systems.
How to implement
For providers and deployers, use this control to support the people who operate or use AI on the organization's behalf.
- Identify the staff and other personnel involved, the systems they use, their responsibilities and the people affected by those systems.
- Tailor learning to those roles and their existing knowledge. Cover approved uses, limitations, data handling, human oversight and how to raise a concern.
- Use relevant examples or short exercises to identify areas needing further support. Record participation and follow up on gaps.
- Refresh the material when systems, responsibilities or risks change. An annual refresher is a suggested starting point, not a statutory training interval. Article 4 does not require a particular certificate or a guaranteed individual level of AI literacy.
Suggested timing and triggers
On onboarding or assignment to an AI role; after material system or role changes; periodic refresh, with an annual cycle as a suggested starting point.
Evidence examples
Role-to-training matrix identifying relevant AI systems and personnel Learning materials with version and review date Participation records and follow-up actions Examples or exercises used to check understanding Records of updates after a system or role change
How to check this control
Select a role that uses AI and check that its learning material reflects the actual system and responsibilities. Ask a participant how they would recognize a limitation or escalate a concern. Follow up on gaps rather than treating attendance alone as proof of understanding.