IAPPProfessional Level2026 Updated

Artificial Intelligence Governance Professional

Updated May 1, 202612 min readCertsqill Editorial

Quick facts — AIGP

Exam cost

$550 USD

Questions

90 items

Time limit

2.5 hours

Passing score

300/500

Valid for

2 years

Testing

Proctored (IAPP)

Who this exam is for

The Artificial Intelligence Governance Professional certification is designed for professionals who work with or want to work with IAPP technologies in a professional capacity. It is taken by cloud engineers, DevOps practitioners, IT administrators, and technical professionals looking to validate their expertise.

You do not need extensive prior experience to attempt it, but you will benefit from hands-on familiarity with the subject matter. The exam tests applied knowledge and architectural judgment, not just memorization. If you can reason about trade-offs and real-world scenarios, structured practice will handle the rest.

Domain breakdown

The AIGP exam is built around official domains, each with a fixed percentage of the question pool. This distribution should directly inform how you allocate your study time.

Domain

Weight

Focus areas

Foundations of AI

15%

AI and machine learning concepts, AI system types (narrow AI, generative AI), AI development lifecycle, training data concepts, and fundamental AI terminology for governance professionals.

Governance & Legal Frameworks

25%

EU AI Act structure and risk classification, NIST AI RMF functions and profiles, OECD AI Principles, national AI strategies, and AI-specific legal obligations across jurisdictions.

AI Risks & Impacts

20%

AI risk categories (bias, hallucination, security risks, privacy risks), AI impact assessment methodologies, algorithmic accountability, and identifying and managing AI-specific harms.

Responsible AI Design

20%

Fairness and bias mitigation in AI systems, transparency and explainability requirements, privacy-by-design in AI, human oversight mechanisms, and ethical AI design principles.

AI Lifecycle Management

20%

AI system procurement and vendor assessment, AI model deployment governance, monitoring AI systems in production, AI incident response, and AI system decommissioning.

Note the domain with the highest weight — many candidates under-invest here because it feels conceptual. In practice, this is where the exam is most precise, with scenario-based questions that test specifics.

What the exam actually tests

This is not a memorization exam. Questions require applied judgment under constraints. Almost every question includes a scenario with explicit requirements and asks you to select the most appropriate solution.

Here are examples of the question types you will encounter:

EU AI Act Classification

An organization deploys an AI system to evaluate job candidates during initial screening. Under the EU AI Act, how should this system MOST likely be classified?

EU AI Act Annex III lists high-risk AI systems. Employment and worker management AI (including CV screening and interview scoring) is explicitly classified as high-risk. Know all Annex III categories and what obligations apply to high-risk systems (conformity assessment, transparency, human oversight).

NIST AI RMF Function Mapping

An AI governance team wants to continuously track whether a deployed AI model's outputs remain within acceptable performance and fairness bounds. Which NIST AI RMF function does this activity BEST align with?

NIST AI RMF has four core functions: GOVERN (culture & policies), MAP (context & risks), MEASURE (analysis & metrics), and MANAGE (responses & oversight). Post-deployment monitoring maps to MEASURE and MANAGE.

AI Bias & Fairness

A credit scoring AI trained on historical loan data consistently assigns lower scores to applicants from a specific demographic. What type of bias MOST likely caused this outcome?

Know AI bias types: historical bias (in training data), representation bias (underrepresented groups), measurement bias (different error rates), deployment bias (context mismatch). Historical/training data bias causing discriminatory outcomes is the most frequently tested scenario.

How to prepare — 4-week study plan

This plan assumes one hour per weekday and roughly 30 minutes of lighter review on weekends. It is calibrated for someone with some relevant experience. If you are starting from zero, add an extra week before Week 1 to familiarise yourself with the basics.

Week 1: AI Foundations & Governance Frameworks

Study AI fundamentals: ML types (supervised, unsupervised, reinforcement), generative AI concepts, and AI lifecycle stages
Read the EU AI Act summary: prohibited AI uses, high-risk system categories (Annex III), transparency obligations
Study NIST AI RMF: four core functions (GOVERN, MAP, MEASURE, MANAGE) and their subcategories
Complete 60 practice questions on AI foundations and governance framework topics

Week 2: AI Risks, Impacts & Legal Obligations

Study AI risk taxonomy: bias risks, hallucination risks, security risks (adversarial attacks, model inversion), and privacy risks
Cover EU AI Act obligations for high-risk systems: conformity assessment, technical documentation, human oversight requirements
Study OECD AI Principles and how they influenced the EU AI Act and NIST AI RMF
Practice 80 questions on AI risk identification, impact assessment, and regulatory obligation mapping

Week 3: Responsible AI Design & Lifecycle Management

Study fairness metrics: demographic parity, equalized odds, and individual fairness — and trade-offs between them
Cover explainability techniques (LIME, SHAP at a conceptual level) and transparency requirements under EU AI Act
Study AI procurement governance: vendor AI assessments, contractual AI obligations, and AI system auditing
Cover AI lifecycle monitoring: performance drift detection, data drift, and model retraining triggers

Week 4: Mock Exams & Regulatory Deep Dive

Complete 2 full 90-question mock exams under 2.5-hour timed conditions
Deep review EU AI Act: Annex I (AI techniques), Annex II (regulated products), Annex III (high-risk use cases) — know each list
Review all incorrect answers; focus on EU AI Act classification scenarios (most commonly missed)
Cross-reference NIST AI RMF functions to EU AI Act obligations for the same scenario — exam loves these dual-framework questions

Common mistakes candidates make

These patterns appear repeatedly among candidates who resit this exam. Knowing them in advance is worth several percentage points.

Not reading the EU AI Act high-risk system classification

The EU AI Act Annex III high-risk categories are directly tested. Candidates who only know AI Act at a high level miss specific classification questions. Memorize the Annex III categories: biometric identification, critical infrastructure, education, employment, essential services, law enforcement, migration, and administration of justice.

Weak on NIST AI RMF function mapping

The exam presents governance scenarios and asks which NIST AI RMF function applies. GOVERN = policies and culture, MAP = understanding context and risk identification, MEASURE = analyzing and tracking risks, MANAGE = responding to and recovering from risks. Confusing MEASURE with MANAGE is a common failure pattern.

Confusing different AI governance frameworks

AIGP candidates must distinguish EU AI Act (binding regulation, risk-based approach), NIST AI RMF (voluntary US framework), OECD AI Principles (high-level international principles), ISO/IEC 42001 (management system standard). Questions test which framework applies in a given jurisdictional or organizational context.

Treating AIGP as a purely technical AI exam

AIGP is a governance certification, not an AI engineering exam. Questions focus on policy, compliance, risk management, and stakeholder communication — not algorithm design or model training. Candidates with technical AI backgrounds should shift their study focus to governance and legal frameworks.

Is Certsqill right for you?

Honestly: Certsqill is built for candidates who have already done some studying and want to convert knowledge into exam performance. If you have never touched the subject, start with a foundational course first — then come to Certsqill when you are ready to practice.

Where Certsqill is strong: question depth, expert-developed explanations, and domain analytics. Every question is mapped to the exam blueprint. When you get something wrong, a detailed explanation shows why the right answer is right and why each wrong answer fails under the specific constraints in the question.

Where Certsqill is not a replacement: video courses and hands-on labs. Use Certsqill to test and sharpen — not as your first exposure to a topic you have never encountered.

Ready to start practicing?

500 AIGP questions. Detailed explanations. Try 20 free.