OneTrust built its business on privacy compliance software and has spent the last few years extending into AI governance: keeping an inventory of AI systems, running risk assessments against frameworks like the EU AI Act and NIST AI RMF, and tracking approvals. OneTrust University is where customers learn to use it. The AI Governance track has three courses. AI Governance Concepts gives a foundational overview of the subject and earns 1.25 IAPP CPE credits. AI Governance: Product Overview covers the essentials of the product and earns 1.75.
AI Governance Product Configuration is the advanced course and needs the first two. Finish all of them, pass the exam and you get a track badge. It is free, delivered as self-paced eLearning or instructor-led sessions, and labs are assigned automatically for seven days. The catch is in the small print: the whole certification programme is only for customers and partners. Without a My.onetrust.com login you cannot even browse the courses.
So this is not a public course in any normal sense, and I rate it accordingly. For the people who can get in, it does its job. Governance programmes often fail in the tooling stage, when someone has to decide what counts as an AI system, what fields go in the inventory and who signs off a risk assessment. Training the team on the product before they configure it saves a lot of rework. The IAPP CPE credits are a genuinely smart move too, because many of the people running AI governance hold the IAPP AIGP and need credits to keep it. What bothers me is the same thing that bothers me about most vendor-run training in this catalogue.
The vendor is the wrong party to teach restraint. A good AI governance course should tell you that a small company with three AI use cases may not need a platform at all, and that a well-run register and a review meeting can be enough. OneTrust's courses will not say that, because the product is the answer to every question they ask. My advice: learn the discipline somewhere neutral first. The IAPP AIGP body of knowledge, the NIST AI RMF and its playbook, and the EU AI Act itself are the real foundation.
Then, if your organisation picks OneTrust, use this track to turn that knowledge into a working configuration.