Course Overview
Employees are already using AI tools — ChatGPT, Copilot, Gemini, and dozens of browser plug-ins — often without approval, oversight, or awareness of the risks involved. This unmanaged usage, known as "Shadow AI," can expose organizations to data leaks, compliance violations, biased or inaccurate outputs, and reputational harm. This course helps employees recognize where Shadow AI shows up in their daily work, understand why it's risky even when the intent is productivity, and adopt safe, approved practices for using AI tools effectively and responsibly.

Audience: All employees who use digital tools in their role (general workforce, office staff, and site/technical staff using AI-assisted apps).

Duration: ~45–60 minutes (self-paced), suitable for a 3-module bilingual LMS build.

Learning Outcomes

By the end of this course, learners will be able to:
1. Define Shadow AI and identify common examples of unsanctioned AI tool use in their workplace.
2. Explain the business, legal, and security risks created by unmanaged AI use (data leakage, confidentiality breaches, compliance exposure, inaccurate/biased outputs).
3. Distinguish between approved and unapproved AI tools and channels within their organization.
4. Apply practical safe-use practices when using AI tools — including what data should never be entered into an AI system.
5. Recognize warning signs of over-reliance on AI outputs and know when human review or escalation is required.
6. Identify the correct process for requesting, reporting, or flagging AI tool use at work.

Course Outline

Part 1: Understanding Shadow AI
* What is Shadow AI, and how it differs from approved/enterprise AI tools
* How Shadow AI typically enters the workplace (personal accounts, browser extensions, free tools, embedded AI features in everyday apps)
* Why employees turn to it (speed, convenience, gaps in approved tooling)
* Real-world consequences of unmanaged AI use (data leaks, IP exposure, compliance breaches)

Part 2: The Risks of Unsafe AI Use
* Data privacy and confidentiality risks — what happens to information entered into public AI tools
* Compliance and regulatory exposure (industry-specific and regional data protection rules)
* Accuracy risks — hallucinations, bias, and over-trusting AI-generated content
* Security risks — malware, phishing, and prompt injection via untrusted AI tools/plug-ins

Part 3: Safe AI Use in Practice
* Your organization's approved AI tools and acceptable use policy
* Golden rules: what never to input into an AI tool (personal data, client data, credentials, proprietary information)
* Verifying and reviewing AI outputs before use
* How and where to report suspected Shadow AI use or request new tool approval
* Quick-reference checklist for safe daily AI use