Governance evidence
Use for control statements that cite ISO/IEC 42001 clause 6.3 change management, EU AI Act Articles 62–75, and SOC 2 trust service criteria.
Infrastructure pillar · Training modules
Infrastructure Fundamentals Training
The invisible stuff that makes everything work. This training will take you from “what’s a server?” to confidently discussing data centres, cloud architecture, and operational resilience.
No technical background needed. We’ll explain everything like we’re having coffee, not like we’re writing a textbook. Takes about 2-3 hours, but go at your own pace.
Controls stack visual kit
Reusable icons and a telemetry-to-audit diagram aligned to our fundamentals and operational guides.
Secure supply chain
Pair with SBOM, provenance, and intake guidance that references SPDX or CycloneDX formats, SLSA Level 3 attestations, and NIST SSDF tasks PS.3/PO.4.
Telemetry & evaluations
Highlight logging of prompts, responses, refusal rates, and safety filters alongside adversarial evaluation suites from NIST AI RMF playbooks or UK AISI guidance.
Assurance & resilience
Use for incident response and assurance artefacts that must meet OMB M-24-10 24-hour notifications, CIRCIA’s 72-hour clocks, and serious-incident duties under the EU AI Act.
Signals
Controls
Evidence
Audit
- Signals: prompt traces, supplier advisories, and safety filter activations streamed into monitoring.
- Controls: guardrails, change review, SBOM validation, and access enforcement tied to AI lifecycle gates.
- Evidence: runbooks that capture artefacts for ISO/IEC 42001 management reviews and SOC 2 narratives.
- Audit: regulator-facing packets that satisfy EU AI Act post-market monitoring, OMB M-24-10, and CIRCIA timelines.
Training Modules
This training is organised into six self-paced modules. Complete them in order for the best learning experience, or jump to specific topics as needed.
Module 1
What is IT infrastructure?
The building blocks: compute, storage, network, and facilities. Deployment options and why infrastructure matters.
Module 2Data centres and hardware
Inside a data centre: servers, storage, networking, power, cooling, and the tier classification system.
Module 3Cloud computing
IaaS, PaaS, SaaS explained. The big three providers and the honest pros and cons of cloud.
Module 4Networking basics
IP addresses, DNS, ports, subnets, and DHCP. Physical components and troubleshooting common problems.
Module 5Capacity and resilience
Capacity planning, redundancy patterns, RTO/RPO, backups, and the 3-2-1 rule.
Module 6Infrastructure management
Change management, documentation, monitoring, automation, and incident management.
Continue exploring infrastructure resources
Build on these fundamentals with additional infrastructure coverage from our research desk.