CICRA launches SL’s first Certified Responsible AI Governance and Ethics Professional Program

As artificial intelligence rapidly transforms the global business landscape, CICRA Campus, has announced the launch of the Certified Responsible AI Governance and Ethics Professional (CRAGE) training program. 

This marks the first time this highly anticipated EC-Council credential is being made available in Sri Lanka.

With over a decade of experience as an Accredited Training Centre (ATC) for EC-Council, CICRA Campus has consistently pioneered programs that address the evolving needs of the industry. Recognising the urgent demand for structured AI oversight, this latest initiative aims to equip Sri Lankan professionals with the skills to govern AI systems responsibly, ethically, and securely.

The launch comes at a critical juncture. While AI adoption has skyrocketed, governance has lagged. According to a McKinsey Global AI Survey, nearly 80% of organisations deploy AI without a defined governance owner or operating model. This gap exposes enterprises to significant regulatory, financial, and reputational risks.

CICRA Holdings CEO Boshan Dayaratne said: “Today, using AI without proper governance is like giving a monkey a knife. It is powerful, but unpredictable and dangerous if not handled with expertise. We see enterprises rushing to adopt AI tools, often exposing their corporate data and proprietary information because they lack the necessary guardrails. The CRAGE program is designed to turn that chaos into controlled, strategic advantage.”

The urgency for AI governance in Sri Lanka is further amplified by the upcoming enforcement of the Personal Data Protection Act (PDPA), with full compliance required by 1st January 2027.

“We are currently in a grace period, but the clock is ticking,” added Dayaratne. “From January 2027, the PDPA will fundamentally change how corporate data is handled. AI systems are voracious consumers of data. Without a governance framework, companies risk non-compliance, hefty penalties, and the loss of customer trust. CRAGE prepares leaders to navigate these regulatory waters before they hit the rocks.”

The CRAGE credential is not a model building certification. Instead, it validates a professional's ability to operationalise governance aligned with global standards such as the NIST AI Risk Management Framework and ISO/IEC 42001. It focuses on the critical "soft" infrastructure of AI: policy, oversight, controls, and assurance.

The program covers 11 comprehensive modules, including AI Strategy, Regulatory Compliance, Risk Management, Security Architecture, and Incident Response. Participants will learn to execute tangible governance artifacts, such as AI governance charters, risk registers, and audit evidence templates.

CICRA Campus emphasises that AI governance is not just an IT issue, it is a boardroom imperative. The CRAGE program is specifically designed for leadership and business owners who are accountable for the ethical and legal deployment of AI.

The curriculum is tailored for:

Executive Leadership: Chief AI Officers (CAIO), Chief Privacy Officers (CPO), and Technology Risk Leaders who must set the strategic tone for AI usage.

Risk and Compliance: Heads of Governance, Risk and Compliance (GRC), Risk Managers, and Regulatory Affairs Directors responsible for mitigating operational and legal risks.

Privacy and Data Governance: Data Protection Officers (DPO) and Data Governance Managers who must ensure AI systems respect user privacy.

Audit and Assurance: Internal Audit Managers and AI Assurance Specialists who need to validate the integrity of AI systems.

By introducing CRAGE to Sri Lanka, CICRA Campus aims to build a local workforce capable of leading the mandate for responsible AI. The program provides the tools to protect reputation, accelerate safe innovation, and build trust with customers and regulators.

“We are proud to bring this global standard to our shores,” concluded Dayaratne. “Our goal is to ensure that Sri Lankan enterprises can scale AI with confidence, knowing they have the certified leadership required to keep their innovations safe, compliant, and ethical.”