AI governance training for boards in Kenya
Half of Kenyan financial institutions already use AI, but fewer than half of those have AI policies. Regulators now expect boards to oversee AI risk. This course explains what the ODPC and the CBK expect, what boards should approve and what to ask management. It is an oversight course, not a technical one.
Choose how your directors take the course
On demand suits directors who join during the year or miss the board session. Live sessions are built around your institution.
KES 15,000per director
- Directors take it at their own pace
- Certificate states the hours
- Suits directors who missed the board session
KES 15,000per director per hour
- From 1 hour; you choose the length
- At a board meeting on Zoom or Teams
- Built around your institution
KES 15,000per director per hour, minimum 5-hour session
- At your board meeting or retreat
- Combine board courses to fill the session
- Case discussion with directors
From the 5th hour, each extra hour is half price. Live and in-person prices are calculated on a minimum of 5 directors; smaller groups are welcome and are priced as 5. For more than 75 directors or more than 16 hours we prepare a custom proposal. All prices include taxes; travel outside Nairobi is charged at cost.
What the rules and guidance require
The course is built on the guidance already in force and the drafts regulators have published.
| Rule or standard | What it requires | Applies to |
|---|---|---|
| ODPC Guidance Note on AI (July 2026) | An AI governance framework and committee, impact assessments before high-risk uses, human review of automated decisions, algorithmic audits and staff training. | Organisations using AI with personal data |
| CBK credit-provider regulations (LN 191/2026), reg. 60 | Rules on automated credit decisions. | Non-deposit-taking credit providers |
| CBK draft Guidance Note on AI in banking | Board responsibility for AI use and risk (draft, comments close 7 November 2026). | Banks and microfinance banks |
Recent developments and emerging issues
The course is updated as rules change. These are the developments it currently covers. Last reviewed: October 2026.
CBK draft Guidance Note on AI in banking
Out for comment from 10 September to 7 November 2026.
AI in the draft Risk Management Guidelines
Model risk becomes a named risk category, internal audit is expected to cover AI-driven fraud, and cyber controls must address AI-driven attacks.
ODPC Guidance Note on AI
Impact assessments for uses such as credit scoring, fraud detection, recruitment screening and employee monitoring. Sending personal data to offshore AI tools needs a lawful transfer basis.
Senate AI Bill sent back for redrafting
As drafted it treated finance as high-risk and proposed liability for directors who knew of an offence. Boards should expect a revised bill.
CBK survey of AI in banking
50% of institutions use AI, 41% of adopters have AI policies and 93% asked the CBK for guidance.
National direction
The National AI Strategy 2025 to 2030, and a draft AI and Emerging Technologies Policy consulted on in 2026.
What directors will cover
Each section ends with a short knowledge check. Learners who finish every section receive a certificate of completion.
How Kenyan organisations use AI
Where AI is already in use and where the risks sit.
The ODPC Guidance Note on AI
Impact assessments, human review, transfers and governance.
The CBK's draft AI guidance
What the drafts expect of boards and management.
Automated decisions
Credit scoring and other automated decisions under Kenyan rules.
AI risk appetite and policy
What the board should approve and how often.
Frameworks at awareness level
ISO/IEC 42001 and the NIST AI Risk Management Framework.
Questions for management
What to ask about AI inventory, controls and incidents.
Case studies and review
Real AI failures and a review of the key points.
Records for your company secretary
The evidence pack supports the annual report of directors' training and shows regulators and auditors that the board has been trained.
- 1Certificates of completionOne per director who completes the course, with a unique number, the course, date and hours.
- 2Completion or attendance reportWho completed or attended, when, and in which edition.
- 3Knowledge check resultsScores from the checks at the end of each section.
- 4Course outlineThe content and the rules it addresses.
FNJ's IT audit, cybersecurity and data protection team
The team audits AI programmes and advises on AI risk and data protection for Kenyan organisations.
CISA, CEH and CIPP/E
Certified Information Systems Auditors, Certified Ethical Hackers and Certified Information Privacy Professionals.
Board training for a development bank
Board training covering AI governance, AML/CFT oversight and corporate governance under the CBK Prudential Guidelines.
AI regulation in Kenya
Where Kenya's AI rules stand and what they mean for your organisation.
AI regulatory compliance guideOften taken together
Board Annual Compliance Pack combines this course with related courses at 10% off when booked live or in person.
Board Annual Compliance Pack
AML/CFT oversight, corporate governance and AI governance for boards.
On demand KES 45,000 per director · 10% off live or in person
Corporate governance for bank boards
The CBK Prudential Guidelines and the 2026 drafts.
Course detailsPrice your training
AI governance training for boards is already ticked. Add other courses if you need them, then submit the form to see the payment details.
Questions about aI governance training for boards
Is there an AI law in Kenya?
Not yet. The Senate AI Bill 2026 was sent back for redrafting in October 2026. AI use is governed today by the Data Protection Act and the ODPC Guidance Note on AI, sector rules such as the CBK credit-provider regulations, and the CBK's draft AI guidance for banks.
What does the ODPC AI guidance require?
An AI governance framework, impact assessments before higher-risk uses such as credit scoring and recruitment screening, human review of automated decisions, algorithmic audits, staff training and a lawful basis for sending personal data to offshore AI tools.
Who should attend?
Directors, senior management and the heads of risk, compliance, internal audit, IT and data protection.
Do we need technical knowledge?
No. The course is pitched at oversight level: what boards must ask, approve and monitor.
What does it cost?
KES 15,000 per director on demand, or KES 15,000 per director per hour live or in person, inclusive of taxes, with 10% off the Board Annual Compliance Pack booked live or in person.
Put AI on your board's agenda
Tell us when your board meets and how many directors will attend. We reply within one working day.