SRMBOK Library subscribers: this eBook is already included in your downloadable library at no additional cost. Please log in and download your copy rather than purchasing it separately. Includes a USD $30 discount voucher for the companion training course, AI for Risk Practitioners: One Hour, No Hype. The book is effectively free for subscribers or people who sign up for the training course. 
 
AI is already being used in risk and security work. The real question is no longer whether practitioners will use it, but how to use it productively without compromising sensitive information, weakening professional judgement or creating work that cannot later be defended.
 
The SRMBOK Guide to AI for Risk Practitioners is written specifically for working security and risk professionals — consultants, security managers, risk advisers and the people who prepare and sign risk assessments. It assumes you understand risk. It does not assume you are an AI specialist, and it deliberately avoids both AI evangelism and AI panic. 
 
The guide explains what actually happens to information submitted to AI systems; the four principal pathways through which information can be exposed; why apparently harmless fragments can combine into a sensitive ‘mosaic’; and how to establish a simple Green–Amber–Red classification line that practitioners can actually use while working.  
 
It then moves from protecting information to getting useful work done. You’ll learn where AI provides genuine leverage in risk practice — including threat-context synthesis, control mapping, risk-register clean-up and turning findings into clear executive prose — and where fluent, plausible AI output can quietly undermine the quality of an assessment. 
 
Particular attention is given to verification and professional defensibility. The guide provides a practical workflow for checking machine-produced claims, assigning human ownership to judgements and maintaining the records needed to demonstrate how an AI-assisted assessment was produced. 
 
 
It also addresses a question increasingly relevant to experienced practitioners: what happens when today’s risk assessment becomes tomorrow’s exhibit? The guide explains why prompts, sources, verification records, edits, sign-offs and disclosure should form part of the professional work record — particularly where an assessment may later be examined by a regulator, court, inquiry or client. 
 
 
Inside the guide:
The four ways information actually leaks through AI use
Consumer vs paid individual vs enterprise/API vs self-hosted AI
The aggregation or ‘mosaic’ effect
A practical Green–Amber–Red classification model
Four high-value uses of AI in everyday risk practice
AI-assisted open-source research and source verification
Hallucination, automation bias, skill atrophy and ‘fluency laundering’
A four-step verification workflow
The six-element professional AI work record
AI use on closed and accredited networks
A six-stage roadmap for moving from ungoverned to governed AI use
Ready-to-use classification, test-card and prompt-pattern templates. 
 
 
No hype. No vendor evangelism. No forty-page AI policy.
The objective is much simpler: use AI where it genuinely improves risk work, keep sensitive information on the right side of the line, verify what matters, and retain enough evidence to stand behind the work you sign.
 
USD $30 — including a USD $30 discount voucher for the companion AI for Risk Practitioners when it is released in August 2026. The eBook is effectively free for anyone who subsequently takes the course.