AAIA Course #7: AI Regulations, Ethics, and Standards: The EU AI Act and Beyond

Master the EU AI Act's risk tiers and regulatory framework for AI audit. This hands-on tutorial covers the four risk categories (unacceptable, high, limited, minimal), how to classify high-risk AI systems in credit scoring and insurance underwriting, provider versus deployer obligations, and penalties up to 35 million euros. Learn the Annex III domains, phased enforcement timelines (2025-2027), Fundamental Rights Impact Assessments, and how sector regulations like SR 11-7 (banking) and FDA SaMD intersect with EU requirements. This video is critical for AAIA candidates: risk-tier classification is a repeatable decision process, and misclassifying a model's tier is how organizations walk into fines. You'll see how Meridian's credit and underwriting models map to high-risk categories, when a deployer becomes a provider under Article 25, and why assuming your organization has no obligations when deploying a vendor model is the most dangerous regulatory mistake. *What You'll Learn:* • The four EU AI Act risk tiers and eight Annex III high-risk domains • Provider versus deployer duties and when a deployer becomes a provider • Phased enforcement timelines, penalty structure (3 tiers up to 35M euro or 7% turnover), and Article 5 prohibitions • Fundamental Rights Impact Assessment (FRIA) and OECD AI Principles • How SR 11-7 (US banking model risk) and FDA SaMD regulations intersect • Repeatable classification decision framework: use case → Annex category → risk tier → role → obligations *CHAPTERS* 0:00 Introduction 0:21 Regulatory Context & Learning Outcomes 2:34 Model Inventory Gap & Scope Problem 4:04 The Four Risk Tiers 6:45 Classification Decision Framework 7:32 Annex III: Eight High-Risk Domains 9:01 Credit Scoring Classification (Meridian) 10:25 Insurance Underwriting Classification (Meridian) 11:47 Provider vs Deployer: Rights & Obligations 14:11 Deployer Oversight Duties (Article 26) 16:23 Fundamental Rights Impact Assessment 17:23 Phased Enforcement & 2025-2027 Timelines 19:05 Three-Tier Penalty Structure 20:46 OECD AI Principles & Ethics Framework 22:56 SR 11-7 Banking Model Risk Management 24:17 FDA Software as Medical Device (SaMD) 25:56 Decision Rules & Takeaways 26:58 Quiz: Risk Classification Scenarios *RESOURCES* 🔗 AAIA Certification: https://www.isaca.org/credentialing/aaia 📋 Full Playlist: https://www.youtube.com/@StackLessons... *ABOUT* StackLessons creates hands-on exam prep content for cloud & AI certifications. Like & Subscribe for more content! *PRACTICE QUESTIONS* Need more practice questions? Visit https://certcompanion.com/exams #ISACA #AAIA #AIAudit 📌 Chapters 0:00 Introduction 0:21 Regulatory Context & Learning Outcomes 2:34 Model Inventory Gap & Scope Problem 4:04 The Four Risk Tiers 6:45 Classification Decision Framework 7:32 Annex III: Eight High-Risk Domains 9:01 Credit Scoring Classification 10:25 Insurance Underwriting Classification 11:47 Provider vs Deployer Obligations 14:11 Deployer Oversight & Article 26 16:23 Fundamental Rights Impact Assessment 17:23 Phased Enforcement 2025-2027 19:05 Three-Tier Penalty Structure 20:46 OECD AI Principles & Ethics 22:56 SR 11-7 Banking Model Risk 24:17 FDA Software as Medical Device 25:56 Decision Rules & Takeaways 26:58 Quiz: Risk Classification #ISACA #AAIA #EUAIAct