Free learning modules for the governance, risk, audit, security, and privacy professionals accountable for AI systems.
Fieldwork is a set of learning modules published by NexNith. Every module runs in a browser and takes between thirty and ninety minutes to complete.
A module sets out the concepts a piece of assurance work depends on, then puts them to use in a simulated engagement, first with guidance and then without it. The learner works from the material a practitioner would be given, makes the decisions a practitioner would make, and sees what those decisions produce.
No prior technical background is assumed, and no code is written at any stage. Every term that carries a specific meaning in the subject is defined at the point it is first used. Where the material draws on a published standard, framework, or regulation, that source is named in full and linked to the primary document.
Fieldwork opens with the agent assurance pathway. Module 0 is the foundation the pathway begins from, and the modules that follow build on the vocabulary it establishes. Standing references sit alongside the pathways and are revised as the publications they describe change.
For the governance, risk, audit, and security professionals made responsible for systems that select their own next action. No certification is attached to this pathway, and it is marked throughout as sitting outside the published exam outlines.
Open the pathway →What an AI agent is, the four components one is assembled from, the loop traced through a single request, the six points at which a control can be placed, and five categories of risk with the business impact of each.
Open the module →Every published agent risk taxonomy, from OWASP, NIST, MITRE, the Cloud Security Alliance, ISO/IEC, the Institute of Internal Auditors, and the EU AI Act, set out with what each one is for and where it applies.
Open the reference →Fieldwork is organized into five pathways, which share one library of modules and one continuous fictional world. Four are aligned to published certification content outlines: the ISACA credentials Advanced in AI Audit (AAIA), Advanced in AI Security Management (AAISM), and Advanced in AI Risk (AAIR), and the IAPP credential Artificial Intelligence Governance Professional (AIGP). The fifth is AI agent assurance, which carries no certification.
Alignment means that the material addresses subtopics those outlines name, and that where a module goes beyond them it says so on the page. It does not mean the material reproduces examination content. None is reproduced anywhere in it.
Fieldwork is free. There is no paid tier, no subscription, no trial, and no gate. No registration is required to open any of it, and no email address is collected to read, run, or complete a module. It will remain so.
NexNith is a cybersecurity, privacy, and AI governance advisory firm, and carries out this work on engagements.