Build an AI Risk Register with Ken Underhill

When a team considers an AI tool, it needs a practical way to document what could go wrong, how serious those risks might be, and what requires further review. AI can help create that starting point, but a convincing draft can still contain gaps and unsupported assumptions.

Join Ken Underhill, writer of the Cybersecurity Insider newsletter, and host Faithe J. Day, PhD, for a demonstration of building an AI-assisted risk register. Using a fictional healthcare scenario, Ken shows how the amount and quality of context provided to ChatGPT changes the risk register it produces. He also explains how to review the results, question vendor claims, and prepare for conversations with business, IT, and security leaders.

What you'll learn: 

  • Use a business scenario to guide an AI-assisted risk register.
  • Identify missing risks, vague entries, and unsupported assumptions.
  • Evaluate risk ratings, proposed mitigations, ownership, and review status.
  • Determine what needs further evidence or expert input before acting.
You don’t need a cybersecurity background to follow the demonstration. Ken explains his decisions as he builds and reviews the register, making the process approachable for business leaders and learners exploring security work or assessing new tools.
  • 45m of video instruction
  • 1 lesson
Patrick Jones - Course author
Meet YOUR instructor

Faithe Day, Ph.D.

Faithe helps non-technical professionals understand AI without the jargon. Her lessons focus on practical workflows, clear explanations, and building confidence with modern tools at work.