Learn / AI Practicum

Register for the monthly class.

AI Security & Infrastructure — individuals, teams & regulated data

Thursday, October 15, 2026 · 9:00–10:30 AM ET / 6:00–7:30 AM PT · Microsoft Teams

Your details

Every field is optional. Registering adds you to the monthly email only if the box below is ticked.

We couldn’t register you. Enter your details again with a valid email address.

Too many attempts from this network. Please wait a few minutes and try again.

We couldn’t save your registration. Please try again in a minute.

We couldn’t find that class. Reload the page and register again.

That’s more than the form can send. Shorten your entries and try again.

We couldn’t read your registration. Please try again.

Registration for the October 15, November 3 and December 1 classes has closed.

Next dates coming soon. New class dates are announced in the HRI AI Practicum Monthly Newsletter. Get the monthly newsletter

First name (optional)

Last name (optional)

Email (optional)

Phone (optional)

Optional. Add your WhatsApp number if you'd like to join the AI Practicum WhatsApp group

Also send me the monthly HRI AI Practicum email

Invite up to 3 colleagues (optional)

We save these addresses and do not add them to the newsletter or email them from this form.

Colleague 1 email (optional)

Colleague 2 email (optional)

Colleague 3 email (optional)

9:00–9:30 AM ET

How ChatGPT and Claude handle your data: business vs. personal plans, training settings, chat history, connectors and two-factor sign-in.
Two kinds of local: local files (Claude Cowork or OpenAI Codex work on folders on your laptop, while the model still runs in the provider’s cloud) and a local model (Ollama or LM Studio, where nothing leaves the laptop).
Prompt injection: when an email, document or web page tells your agent what to do, and the rules that stop it.
A personal security prompt every agent you use should follow, in a local-files and a local-model version.

9:30–10:00 AM ET

One gatekeeper agent for every password release and security action, with a one-time code (OTP) or two-factor approval; financials, outbound messages and confidential files also need a master passphrase.
Payment fraud and deepfakes: invoices, bank-detail changes and payments are approved through a channel separate from email, with a call-back to a known number, never on an email, call or video alone.
A security-scan skill that inventories email, files, messages and agent access into one encrypted, two-factor location, and expiring secure links instead of attachments.
Offboarding and a kill switch: remove a person’s and an agent’s access in one step, and stop every agent at once when something goes wrong.
Staff using personal AI accounts: an AI acceptable-use policy you can adapt, and the prompts to propagate across every agent.

10:00–10:30 AM ET

Running models inside Amazon Bedrock, Microsoft Azure AI Foundry or Google Cloud so the whole ecosystem stays enclosed in your own cloud account.
Gating models and systems to closed virtual machines reachable only from specific laptops, IP addresses and physical locations, still behind two-factor, with walled, controlled outbound file transfer.
Vendor terms to check: training on your data, retention, zero data retention, data processing agreements, and business associate agreements (BAAs) for HIPAA.
When you need it (PII, account and routing numbers, HIPAA data), and when a regulated third-party vendor is the better answer.