IAPP AIGP

What is IAPP AIGP

The Artificial Intelligence Governance Professional (AIGP) certification by IAPP validates expertise in building and managing responsible AI programs. It focuses on applying legal requirements, ethical standards, and governance frameworks to the full AI lifecycle, from data and development to deployment and monitoring.

• Format: 100 questions (85 scored, 15 unscored)
• Type: Multiple-choice with case-based scenarios
• Duration: 3 hours
• Passing Score: 300 on a 100–500 scale
• Focus: Governance, law, standards, risk management, and practical oversight of AI systems

Who Should Take this Exam

This certification is designed for professionals accountable for responsible AI oversight and compliance. Typical candidates include:

• AI governance managers
• Privacy, risk, and compliance officers
• Data governance specialists
• Legal and policy advisors in tech/healthcare/finance
• AI operations or model risk leaders
• Senior data scientists involved in policy and accountability

Experience levels generally range from mid-career professionals (3–5 years) to senior leaders responsible for program design and oversight.

Prerequisites and Recommendations

Official prerequisites: None. Anyone can register.

Practical recommendations:

• 1–3 years’ exposure to AI, compliance, or governance roles
• Strong understanding of privacy and security concepts
• Familiarity with frameworks such as NIST AI RMF or ISO AI standards
• Prior certifications in privacy, governance, or data protection can help but are not required

Exam Objectives and Domains

The exam blueprint is divided into four domains:

1. Foundations of AI governance
2. Laws, standards, and frameworks for AI
3. Governing AI development
4. Governing AI deployment and use

Foundations of AI Governance

• Define AI governance and its importance
• Apply responsible AI principles (fairness, transparency, accountability, etc.)
• Establish roles, responsibilities, and policies
• Manage third-party risks

Laws, Standards, and Frameworks

• Translate privacy law principles into AI contexts
• Apply consumer protection and anti-discrimination rules
• Understand AI-specific regulations (such as the EU AI Act)
• Use accepted global frameworks and standards

Governing AI Development

• Define and scope AI use cases responsibly
• Manage data lineage, rights, and quality for training/testing
• Conduct AI risk and impact assessments
• Implement validation, testing, and monitoring protocols
• Document governance artifacts (model cards, audit logs)

Governing AI Deployment and Use

• Evaluate deployment context and compliance obligations
• Review vendors and contractual obligations
• Train users and business teams on AI risks and controls
• Continuously monitor and audit deployed models
• Manage incidents, disclosures, and system deactivation when necessary

What Changed in This Version

• Streamlined into four clear domains instead of multiple smaller sections
• New focus on AI-specific regulations (e.g., EU AI Act, GPAI obligations)
• Emphasis on development vs deployment governance
• Reduced weight on technical details; more focus on day-to-day oversight tasks

Registration and Scheduling

• Purchase the exam through the IAPP website
• You have 12 months from purchase to take the exam
• Schedule through Pearson VUE for test center or online proctored delivery
• Appointments must be booked at least 24 hours in advance

Pricing and Vouchers

• Standard exam price: around $799
• Discounted member price: around $649
• Retakes: lower-cost retake fees available
• Student and military discounts may apply
• Organizations often provide voucher programs to cover exam costs

Policies You Should Know

• Exams must be taken within one year of purchase
• Cancellations or reschedules must follow Pearson VUE deadlines
• No personal belongings allowed inside the exam room
• Online exams require a private, secure space and webcam monitoring

Scoring and Results

• Scaled scoring system: 100–500 scale, with 300 required to pass
• No partial credit is given
• Unscored items do not affect results
• Results are provided immediately after the exam
• Detailed score breakdowns show performance by domain

Exam Day and Test Experience

• On-site: Bring valid government ID; belongings stored in lockers; supervised testing environment
• Online proctored: Private room, system check, webcam and microphone required
• Time management: Aim for 1.8 minutes per question; flag items to review later
• Breaks: Optional short break midway, depending on delivery mode
• Interface: Standard Pearson VUE platform with navigation and review features

Study Plan and Resources

Beginner plan (10–12 weeks)

• Weeks 1–2: Review all four domains and note key governance concepts
• Weeks 3–5: Focus on AI foundations and laws/standards; create summary sheets
• Weeks 6–8: Practice governance scenarios for development (data rights, testing)
• Weeks 9–10: Deep dive into deployment monitoring, incidents, and audits
• Weeks 11–12: Take full-length timed practice runs, review weak domains, finalize glossary

Experienced candidate plan (4–6 weeks)

• Week 1: Assess domain strengths and gaps
• Weeks 2–3: Review AI Act, frameworks, and governance in development
• Week 4: Run timed practice exams and scenario reviews
• Week 5: Focus on deployment controls, vendor risk, and monitoring
• Week 6: Light review, practice decision-making on governance scenarios

Certification Validity and Renewal

• Valid for 2 years
• Renewal requires 20 continuing professional education (CPE) credits per cycle
• Carryover allowed for some credits from the last 6 months of the previous cycle
• Renewal also requires payment of a certification maintenance fee

Career Outcomes

Related or Next-Step Certifications

• CIPT (Privacy in Technology): Great follow-up for technical privacy skills
• CIPP/CIPM: Strong complements for legal and managerial privacy knowledge
• CHDA or CDPSE: For deeper data analytics and privacy engineering exposure

How This Exam Compares to Similar Certifications

• AIGP vs CIPT: AIGP focuses on AI governance and regulation, while CIPT focuses on privacy engineering and technology.
• AIGP vs CDPSE (ISACA): CDPSE covers privacy in solutions broadly; AIGP specializes in AI-specific risk, governance, and lifecycle controls.