CYBERSECURITY MONTH 2026
Make AI literacy a shared reflex, and document it
Generative AI is now part of teams' daily work: writing, summarizing, translating, analyzing. Article 4 of the AI Act requires organizations that use AI systems to take measures to promote AI literacy among their staff. BlueSecure helps you build this program by profile, embed the right reflexes, from using an AI assistant to spotting a deepfake, and keep a record of it.
- Short modules, up to 12 languages
- Certificates and exports
- Hosting in France
What Article 4 says
Article 4 of the European regulation on artificial intelligence has applied since February 2, 2025. Amended by a European reform that entered into force in mid-July 2026, it provides that providers and deployers of AI systems take measures to promote AI literacy among their staff and the people who use these systems on their behalf.
These measures take into account each person's technical knowledge, experience and training, as well as the context of use. The text does not set a minimum level for each person. National market surveillance authorities have enforced this article since August 2, 2026.
- Who is concerned? : An organization that uses an AI system under its own authority, in a professional context, is in principle a deployer under the regulation. This applies to many companies and public administrations whose teams use generative AI tools.
What is expected in practice: a program by profile
The text calls for measures adapted to people and their uses. In practice, this means a program that distinguishes profiles, repeats over time and leaves a record.
- All employees : use AI with good judgment, protect data, recognize generated content.
- Exposed roles : finance, purchasing, executive assistants, recruiting, facing fraud that exploits AI.
- Technical teams : developers and IT, who handle code and sensitive data.
- Leaders : understand what AI changes, for the organization and for attackers.
Use AI with confidence
Short modules to adopt the right reflexes every day.
- How to use AI? (30 min) : understand generative AI, use it effectively in a professional context, spot errors and illusions of reliability.
- Responsible use of generative AI (5 min) : use generative AI with confidence.
- Shadow IT and Shadow AI (3 min) : tools not approved by the organization and the reflexes to use them safely.
Your own rules, AI policy or list of approved tools can be added to the modules with Learning Studio.
Recognize AI-generated content and attacks
Attackers use AI too: flawless messages, cloned voices, fake candidates. Your teams learn to verify before acting.
- AI, deepfakes and other risks (6 min) : the limits and risks of using AI at work.
- Fake candidate scam (5 min) : recognize an AI-generated candidate, face and voice.
- Real or AI (2 min) : a mini-game to tell real content from generated content.
- Phishing 360™ simulations : phone calls (vishing) and deepfake, to practice in real conditions.
Adapt the program to each profile
Developers
In RedCode™, a 15-minute escape game, the developer is tempted to paste all their code into a public AI tool for a quick fix. They learn to remove personal data, secrets and keys before any use.
Leaders
The executive committee keynote spends time on what AI changes in the attackers' playbook, with a demonstration of voice cloning or video deepfake.
On-site highlights
Shadow AI and AI deepfake talks, and a live deepfake booth where everyone can try face swapping and voice cloning.
Document your actions
You show who was trained, on which topics, on what date and with what results.
- Campaign and learning path history.
- Individual attestations and certificates.
- PDF and Excel exports, API.
- Smart Report™ reports sent automatically to leadership, at the frequency you choose.
What BlueSecure covers, and what falls under other initiatives
BlueSecure helps implement and document AI literacy measures for your teams. The inventory of your AI systems, their classification by risk level, AI governance and the obligations specific to high-risk systems fall under other initiatives, led with your legal, compliance and technical teams.
Data that stays in France
Platform data is hosted in France by French hosting providers certified ISO 27001, which are not subject to extraterritorial laws such as the US CLOUD Act. If your context requires it, SecNumCloud, dedicated server or on-premise options are available.
FAQ
- Is my organization concerned by Article 4 of the AI Act?
- Article 4 applies to providers and deployers of AI systems. An organization that uses an AI system under its own authority, in a professional context, is in principle a deployer. Your legal department confirms the classification based on your uses.
- What level of AI literacy is required?
- Since its amendment by the 2026 European reform, Article 4 requires measures to promote AI literacy, adapted to knowledge and context of use. It does not set a minimum level for each person.
- Should all staff be trained the same way?
- The text requires taking into account each person's knowledge, experience and context of use. A program by profile, covering employees, exposed roles, technical teams and leaders, follows this logic.
- How do we prove the measures taken?
- Through campaign and learning path history, individual attestations and certificates, PDF, Excel and API exports, and Smart Report™ reports that document the program over time.
- Does BlueSecure make me compliant with the AI Act?
- BlueSecure helps implement and document AI literacy measures for your teams (Article 4). The regulation covers a wider scope: inventory and classification of AI systems, governance, obligations for high-risk systems.
- Are the modules available in several languages?
- Yes, up to 12 languages depending on the module. Responsible use of generative AI, Shadow IT and Shadow AI, and AI, deepfakes and other risks are available in all 12 languages of the platform.
Let's structure your AI literacy program
Let's discuss your AI uses, your audiences and your evidence needs. We will show you how to roll out a continuous, documented program.