EU AI Act Compliance in Practice: Risk Mapping and a Remediation Roadmap

The EU AI Act is in force. For organisations that use, develop, or procure AI systems, that means real obligations — and for many, a gap between current practice and what the Act requires.

This full-day compliance workshop is built around doing rather than listening. Working in structured exercises, participants apply the Act's risk classification framework to a set of AI systems — including ones they use in their own organisations. They identify applicable obligations, assess current compliance status, and draft a gap analysis and remediation roadmap they can take back to their leadership.

The session extends well beyond The EU AI Act Explained (ACT-A) into the compliance mechanics: conformity assessments, technical documentation, post-market monitoring, human oversight requirements, and the distinction between provider and deployer obligations. Each element is illustrated with worked examples from real organisational contexts.

Participants leave with a completed risk map, a gap analysis, and an outline remediation roadmap — tangible outputs, not just awareness. The EU AI Act Explained (ACT-A) is strongly recommended beforehand. No legal training assumed.

By the end of this training, the participant will be able to:

• Map at least three AI systems used in their organisation against the Act's risk classification framework
• Identify the applicable compliance obligations for each classified system
• Distinguish provider and deployer obligations and apply them to their organisational context
• Draft a gap analysis and outline remediation roadmap for their highest-priority AI compliance issues

Structured compliance workshop. Participants work in pairs or small groups through guided exercises, applying each compliance framework to their own organisational context. Each participant produces a completed risk map and gap analysis by end of day.