AIGP Certification: The Operator’s Guide to IAPP’s AI Governance Credential

Key takeaways

• The AIGP certification (Artificial Intelligence Governance Professional) is issued by the IAPP and is the first broadly recognised, vendor-neutral credential for AI governance.
• Its 2026 body of knowledge (v2.1) covers four domains: the foundations of AI governance, how laws and standards apply to AI, governing AI development, and governing AI deployment.
• The exam is 100 multiple-choice questions in 2 hours 45 minutes, scored on a 100 to 500 scale with 300 to pass, and about 30% of questions are case-study based.
• Expect to pay $649 as an IAPP member or $799 as a non-member for the exam, plus optional membership and training.
• It fits privacy, compliance, risk, legal and product professionals who need a shared language for governing AI, not engineers looking for a coding credential.

What is the AIGP certification?

The AIGP certification is the Artificial Intelligence Governance Professional credential from the International Association of Privacy Professionals (IAPP), the policy-neutral non-profit founded in 2000 that also runs the well-known CIPP privacy certifications. The IAPP launched the AIGP in 2023, and it quickly became the reference credential for people who are asked to govern artificial intelligence rather than build it. What the certification proves is breadth. An AIGP holder can explain how an AI system moves from idea to production, where the legal and ethical risks sit, and how to put controls around them. It is not a machine-learning exam. There is no code to write and no model to train. The focus is governance: policy, law, risk management and the operating structures that keep AI use accountable. That framing matters because AI governance has become a distinct job. Regulators now expect named accountability for AI systems, and buyers ask suppliers how they control the models they deploy. The AIGP gives a common vocabulary to the legal, risk, product and technical people who have to answer those questions together. If you are building that capability from scratch, our AI governance framework guide sets out the structure the certification assumes.

What the AIGP exam tests: the 2026 body of knowledge

The IAPP refreshed the AIGP body of knowledge to version 2.1, effective 2 February 2026, and consolidated the original seven-domain structure into four. The update reflects the EU AI Act moving into force and updated guidance from the NIST AI Risk Management Framework. The four domains map onto the lifecycle of a governed AI system.

Domain I: Foundations of AI governance

This domain covers core AI concepts, responsible-AI principles, governance roles, and the data and intellectual-property policies that sit underneath any AI programme. In practice, this is where an organisation decides who owns AI risk and what responsible use means for its own cases.

Domain II: How laws, standards and frameworks apply to AI

This is the heaviest regulatory domain. It expects fluency in the EU AI Act, the NIST AI Risk Management Framework and ISO/IEC 42001, plus how they overlap. Our framework cross-mapping shows how one control can satisfy more than one of them at once.

Domain III: Governing AI development

Here the exam moves into lifecycle governance: risk assessment before a model is built, documentation, and go or no-go decisions at each stage. In a live programme this is where AI system documentation and structured risk intake do the work.

Domain IV: Governing AI deployment and use

The final domain covers what happens after launch: monitoring, incident response, fairness oversight and regulatory reporting. Each of these is an operating task, not a concept. Incident reporting under the EU AI Act and human oversight both live in this domain. Read together, the four domains describe an operating model, not a reading list. That is the gap between passing the exam and running the programme, and we return to it below.

Exam format, scoring and logistics

The AIGP exam has 100 multiple-choice questions. Of these, 85 are scored and 15 are unscored pilot questions the IAPP is testing for future exams, so you will not know which is which. You have 2 hours 45 minutes to complete it. About 30% of the questions are tied to short case studies, which reward applied judgement over memorised definitions, such as spotting bias in a hiring model. Scoring uses a scaled range of 100 to 500, and the passing score is 300. You can sit the exam either at a test centre or online with remote proctoring. If you do not pass, there is a seven-day waiting period before you can retake it. The credential is valid for two years. To keep it, you maintain 20 continuing professional education (CPE) credits over each two-year cycle. The exam is demanding for a reason: the case-study weighting and the breadth of Domain II mean rote study alone rarely gets a candidate to 300.

What the AIGP costs

The headline number is the exam fee, but it is not the only cost. Here is the full picture.

For most candidates the practical choice is between paying the non-member exam fee of $799 or joining the IAPP for $295 and paying the member rate of $649. Membership also waives the biennial maintenance fee, so anyone planning to keep the credential usually comes out ahead by joining. Training is optional; many people prepare with the official body of knowledge and third-party materials instead.

Is the AIGP worth it?

For the right role, the salary case is strong. Reported figures put AIGP-certified professionals between $141,000 and $170,000 a year, and AI-governance roles command roughly a 56% wage premium over comparable positions. People who combine privacy and AI-governance responsibilities report a median around $169,700, against $151,800 for AI governance alone. IAPP research also links certification to pay: about 13% higher salaries for holding one of its credentials and 27% for holding several. The credential fits privacy professionals, compliance and governance specialists, risk managers, auditors, legal counsel, product managers and data scientists who sit close to deployment decisions. It gives a mixed team one language to use with regulators and customers. It is a weaker fit for purely technical staff who have no interest in policy, for entry-level IT roles, and for anyone at an organisation with no meaningful AI activity yet. The AIGP certifies governance judgement, so its value tracks how much governance work you actually do.

How to prepare

The IAPP recommends a minimum of 30 hours of study even for experienced practitioners. In practice, most people report 60 to 100 hours spread over 8 to 12 weeks. The gap between the two numbers is Domain II: if the EU AI Act, NIST AI RMF and ISO 42001 are already part of your daily work, the lighter end is realistic; if they are not, budget more. A domain-by-domain plan works well. Start with the foundations and responsible-AI principles, then spend the most time on the laws and standards domain, since it carries the most detail. Work through the development and deployment domains as a lifecycle, mapping each concept to a concrete task. Finally, practise with case-study questions, because the applied 30% is where prepared candidates lose points. Reading the primary sources once, rather than only summaries, pays off on the harder questions.

AIGP vs other AI governance credentials

The AIGP is not the only option, and the right choice depends on your role. Compared with the IAPP’s own CIPP privacy certifications, the CIPP is the established foundation for privacy work with broader immediate demand, while the AIGP is the newer AI-governance specialty with higher salary potential and a harder exam. Many professionals hold both. Security-focused AI certifications aim at a different audience. Credentials built for AI security cover threats, testing and controls for engineers, whereas the AIGP is about policy, law and lifecycle accountability. ISO/IEC 42001 auditor and implementer credentials sit closer to the AIGP but are tied to a single management-system standard, where the AIGP spans several frameworks. Vendor responsible-AI certificates and university programmes round out the field but tend to be narrower or platform-specific. If your job is to design and run an AI governance programme across legal, risk, product and technical teams, the AIGP is the credential that gives all of them a shared model.

From certification to operation

The AIGP gives you the vocabulary. It does not give you a running programme. That is the honest limit of any certification, and it is the point where most guides stop. Domains III and IV describe work that has to happen every day: maintaining an inventory of AI systems, tiering their risk, attaching controls, collecting evidence, and reporting incidents on the clock the EU AI Act sets. Doing that in spreadsheets falls apart quickly once you have more than a handful of systems. The knowledge the AIGP tests becomes an operating model only when it is wired into a repeatable workflow: a register of systems, a risk method, a control library mapped to the frameworks, and an audit trail. That is the layer AI Sigil provides. The certification proves you understand the four domains; a governance platform is how you run them at scale, with the EU AI Act, NIST AI RMF and ISO 42001 already mapped so one control can satisfy several obligations. The exam and the platform are complementary: one certifies the person, the other operates the programme.

FAQ

Is the AIGP certification worth it? For roles that involve real AI governance work, yes. The salary premium is meaningful, and the credential is quickly becoming a baseline expectation for AI-governance jobs. If your work has little to do with policy, risk or compliance, the return is smaller. How much does the AIGP certification cost? The exam is $649 for IAPP members and $799 for non-members. IAPP membership is $295 a year and lowers the exam fee while waiving the $250 biennial maintenance fee. Optional official training is around $995, and third-party study materials run from $50 to $500. What is the pass rate for the AIGP? The IAPP does not publish an official pass rate. The exam is widely described as challenging because of the case-study weighting and the depth of the laws-and-standards domain. Most candidates who prepare thoroughly, and practise applied questions, report passing on the first attempt. Are there prerequisites for the AIGP? No. There are no formal prerequisites, and no professional experience is required to sit the exam. Relevant experience in privacy, compliance, risk or governance makes preparation faster, but it is not mandatory. How long does it take to prepare for the AIGP? The IAPP suggests a minimum of 30 hours. In practice most people spend 60 to 100 hours over 8 to 12 weeks, with the bulk of that time on the laws, standards and frameworks domain. What is the best AI governance certification? The AIGP is the most broadly recognised general AI-governance credential today. Security-oriented and standard-specific certifications can be better for narrower roles, but for a cross-functional governance role the AIGP is the strongest single choice.

Conclusion

The AIGP certification has become the default credential for AI governance because it certifies exactly the judgement the job needs: reading the law, sizing the risk, and governing an AI system across its lifecycle. Its 2026 body of knowledge is current, its salary case is real, and its four domains describe an operating model rather than a syllabus. The certificate proves you understand that model. Turning it into a programme that regulators and customers can trust is the next step, and it is where the frameworks the AIGP tests, the EU AI Act, NIST AI RMF and ISO 42001, stop being exam topics and start being daily practice.