AIGP Pass Rate, Format & Study Guide

The Artificial Intelligence Governance Professional (AIGP) is a certification from the International Association of Privacy Professionals (IAPP) — the same organization behind the well-established CIPP (privacy), CIPT (technology), and CIPM (management) family of privacy credentials. AIGP launched April 2, 2024, making it one of the first vendor-neutral, cross-industry certifications built specifically around the emerging discipline of AI governance: not building AI systems, and not securing them in the traditional cybersecurity sense, but the broader work of ensuring an organization develops and deploys AI responsibly, in line with applicable law, internal policy, and the practical realities of trust and risk. IAPP maintains the credential against a formal Body of Knowledge and Exam Blueprint, currently at version 2.1 (approved September 9, 2025, effective February 2, 2026), which is periodically revised as the regulatory and technical landscape around AI shifts — a genuinely fast-moving area compared to IAPP's more mature privacy certifications.

AI governance emerged as a distinct professional discipline largely in response to a wave of binding and near-binding regulation arriving in a short window: the EU AI Act (the first comprehensive AI-specific law from a major regulator, with phased obligations rolling out through the mid-2020s), the NIST AI Risk Management Framework in the US (voluntary but increasingly treated as the de facto standard reference), ISO/IEC 42001 (the first international AI management system standard), and a growing patchwork of US state-level AI laws. Organizations deploying AI at any real scale now need people who can translate that regulatory and standards landscape into actual internal policy, risk assessment, and deployment practice — and AIGP is IAPP's attempt to formally credential that skill set the way CIPP formally credentialed privacy expertise a decade earlier. Because the role sits at the intersection of legal/compliance, technical, and product functions, holding AIGP signals to an employer that a candidate can operate across that intersection rather than being purely a lawyer who doesn't understand model risk, or purely an engineer who doesn't understand regulatory obligation.

AIGP is aimed at professionals who already sit near AI governance work or are moving into it: privacy officers and privacy program managers extending their remit to cover AI systems, compliance and risk management professionals at organizations deploying or building AI, in-house and outside counsel advising on AI regulation, product managers and technical program managers responsible for AI features who need working fluency in the governance requirements around them, and AI/ML practitioners moving toward governance, ethics, or responsible-AI roles rather than pure model development. Because IAPP sets no prerequisites, it's also realistic for someone earlier in their career to use AIGP as a credential that opens doors into this specific niche, though the exam's assumed familiarity with the full Body of Knowledge means it isn't a casual add-on credential — genuine preparation time matters regardless of starting background.

The certifying body does not publicly publish an official pass rate for this exam. Be wary of third-party sites citing a specific number here — treat any pass-rate claim you see elsewhere for this exam as unverified.

IAPP allows retakes and offers a discounted retake price on subsequent attempts of the same certification. Candidates have up to one year from their original exam purchase date to complete testing, which effectively caps how many retakes are practical within that window.

IAPP uses scaled scoring, not a flat percentage: raw correct-answer counts are converted onto a common 100-500 scale to account for slight difficulty differences between exam forms, with 300 as the passing mark. IAPP states explicitly that there is no additional scaling or question weighting, and no separate performance requirement for individual sections — the cut score is set once, in advance, through psychometric analysis reviewed by an Exam Development Board.

The AIGP exam is a linear, closed-book, computer-based test delivered through IAPP's exam-vendor infrastructure, purchasable and schedulable directly through store.iapp.org. It consists of 100 questions (predominantly multiple-choice, with IAPP's own materials indicating roughly 30% scenario-based items that require applying a concept to a realistic situation rather than pure recall) over a total window of 2 hours 45 minutes (165 minutes) of actual test time, plus a built-in 15-minute break partway through — candidates don't need to request the break separately, it's built into the standard exam session. Once purchased, a candidate has up to one year to schedule and sit for the exam, giving real flexibility to study at a self-managed pace rather than being locked into a fixed near-term date the way some other certifications require. Results are typically available shortly after completing the exam, following IAPP's standard scaled-scoring process.

The AIGP Body of Knowledge (v2.1) is organized into four domains. Domain I, Understanding the Foundations of AI Governance, covers what AI governance actually is as a discipline — core principles, common pillars used to structure a governance program, and best practices that apply regardless of an organization's industry, size, or sector; this is the conceptual groundwork the other three domains build on. Domain II, Understanding How Laws, Standards and Frameworks Apply to AI, is the regulatory-literacy domain — working knowledge of instruments like the EU AI Act, the NIST AI Risk Management Framework, ISO/IEC 42001, and the broader landscape of AI-specific and AI-adjacent law and standards, plus how to actually map those external requirements onto an organization's internal governance structure. Domain III, Understanding How to Govern AI Development, focuses on the build side: governance controls, documentation, and risk assessment practices that apply while an AI system is actually being designed, trained, and validated, before it reaches production. Domain IV, Understanding How to Govern AI Deployment and Use, covers the other half of the AI lifecycle — ongoing monitoring, incident response, model drift and performance management, and governance obligations that continue for as long as a deployed AI system remains in production and in use. IAPP does not publish exact percentage weightings across these four domains in its public materials — candidates should treat all four as requiring real depth rather than assuming any one domain is a minor share of the exam.

AIGP has no formal prerequisites of any kind — no required degree, no minimum years of experience in privacy, law, or AI/ML, and no requirement to hold any other IAPP credential first. This is a deliberate design choice by IAPP, reflecting that AI governance is genuinely cross-disciplinary and draws people in from legal, technical, privacy, product, and general compliance backgrounds with very different starting points. The practical implication is that eligibility isn't the gate for this credential — actual command of the Body of Knowledge is, since the exam is written assuming a working familiarity with it regardless of a candidate's professional background going in. Candidates who already hold IAPP's other credentials (CIPP/E, CIPM, CIPT) will find real conceptual overlap in Domain II's law-and-standards content, but AIGP does not require or formally credit any prior IAPP certification.

The exam fee itself is $649 for current IAPP members or $799 for non-members — a real, immediate cost consideration since the gap between the two prices ($150) is roughly half of IAPP's own $295 annual membership fee, which is why many candidates find membership pays for itself even before counting its other benefits. Membership additionally includes access to IAPP's study resources, the AIGP Body of Knowledge document itself, and coverage of the certification maintenance fee once the credential is earned (a real ongoing cost non-members would otherwise pay separately at recertification). IAPP also sells a dedicated digital AIGP practice exam separately for roughly $60. Beyond IAPP's own official materials, third-party AIGP prep content (books, courses, flashcard sets) ranges widely — from effectively free self-study using IAPP's own free resources up through paid multi-hundred-dollar structured courses — so a realistic full budget for a first-time candidate who isn't already an IAPP member ranges from roughly $650-$900 depending on how much paid third-party prep material, if any, gets added on top of the core exam fee.

The AIGP credential is valid for two years from the date earned. To maintain it, credential holders must complete 20 continuing education (CE) credits over that two-year cycle, specifically aligned to content covered in the AIGP Body of Knowledge — CE from unrelated IAPP or third-party training generally doesn't count unless it maps back to AIGP's own knowledge domains. A certification maintenance fee is also required at renewal; IAPP members have this covered as part of their membership, while non-members pay it separately (IAPP's own materials describe an initial maintenance-fee allowance folded into the exam cost, with roughly $250 due at actual recertification for non-members). Because the underlying regulatory landscape this credential covers is genuinely still forming, the CE requirement functions less as a formality than it might for a more mature, stable body of knowledge — real regulatory and standards developments in the two years between certification and renewal are likely to be substantively new material, not just a refresher.

For a 100-question, 165-minute exam with no prerequisites but four genuinely broad Body of Knowledge domains (foundational AI governance, applicable laws/standards like the EU AI Act and NIST AI RMF, governing AI development, and governing AI deployment/use), 6-10 weeks of structured study is a reasonable default — longer for candidates without a privacy, legal, or AI/ML background, since the exam assumes familiarity with the full Body of Knowledge regardless of starting point. IAPP's own AIGP Study Guide and Body of Knowledge document are the primary reference; a final week of timed practice questions helps with the 2.75-hour pacing.

The AIGP Body of Knowledge itself was updated to version 2.1 (approved September 9, 2025, effective February 2, 2026) — a recent, real revision reflecting how quickly the underlying subject matter is still moving, and a reasonable signal that further Body of Knowledge revisions should be expected on a similar cadence going forward as AI regulation (particularly the EU AI Act's phased implementation) and standards work (ISO 42001 adoption, further NIST guidance) continue to develop. Candidates studying from older AIGP prep material dated before September 2025 should specifically confirm they're working from content aligned to the current v2.1 blueprint rather than an earlier version, since a credential this new has less settled, stable prep-material inventory than IAPP's older privacy certifications.