IICTI Certified AI Governance Professional

Holders demonstrate that they can apply and evaluate aI management system and governance operating model, eU AI Act compliance architecture, global AI regulation and framework harmonisation and aI risk and impact assessment, plus 7 further areas, in realistic professional scenarios, as defined in the AQSCERT scheme for AI Governance Professional.

Who it is for: Professionals working, or preparing to work, in artificial intelligence roles.

1. 01AI management system and governance operating model10% of the exam

   • Design an AI governance operating model with clear accountability, decision rights and escalation paths.
   • Scope: ISO/IEC 42001:2023 AI management system, ISO/IEC 38507, OECD AI Principles, AI governance committees, roles and RACI, policy hierarchy and integration with ISMS, privacy and enterprise risk functions.
2. 02EU AI Act compliance architecture10% of the exam

   • Evaluate AI systems against the EU AI Act and architect the compliance programme for each operator role.
   • Scope: Risk classification, prohibited practices (Art. 5), high-risk system obligations, provider, deployer, importer and distributor roles, GPAI model obligations and Code of Practice, conformity assessment, harmonised standards and application timelines.
3. 03Global AI regulation and framework harmonisation5% of the exam

   • Design a harmonised control set that satisfies multiple AI regulatory regimes across jurisdictions.
   • Scope: NIST AI RMF and Generative AI Profile, Council of Europe Framework Convention on AI, UK principles-based regime, US state laws such as the Colorado AI Act, China generative AI measures and cross-framework control mapping.
4. 04AI risk and impact assessment6% of the exam

   • Lead AI risk and impact assessments that identify harms to individuals, society and the organisation and set proportionate controls.
   • Scope: ISO/IEC 23894 AI risk management, ISO/IEC 42005 AI system impact assessment, fundamental rights impact assessment (Art. 27), DPIA integration, algorithmic impact assessment and risk acceptance criteria.
5. 05AI inventory, lifecycle controls and model risk management12% of the exam

   • Design lifecycle controls that keep every AI system inventoried, validated and governed from inception to retirement.
   • Scope: AI system and model inventory, ISO/IEC 5338 lifecycle, SR 11-7 model risk principles, stage gates and approvals, change and retraining control, validation independence and decommissioning.
6. 06Data governance, privacy and intellectual property for AI6% of the exam

   • Evaluate data sourcing and use in AI systems for privacy, quality and IP compliance.
   • Scope: GDPR lawful basis for training and inference, Art. 22 automated decision-making, data minimisation, ISO/IEC 5259 data quality, data provenance, copyright and text-and-data-mining opt-outs, training data summaries.
7. 07Fairness, transparency and explainability assurance8% of the exam

   • Evaluate AI systems for bias and transparency and define assurance criteria that hold up to regulatory and public scrutiny.
   • Scope: Group and individual fairness metrics, disparate impact analysis, explainability requirements by audience, transparency obligations (Art. 13 and Art. 50), content labelling and C2PA provenance, user disclosure design.
8. 08Generative and agentic AI governance11% of the exam

   • Design governance controls for generative and agentic AI that bound autonomy and keep meaningful human oversight.
   • Scope: GPAI systemic-risk obligations, acceptable use policies, human oversight design (Art. 14), agent autonomy levels and permissions, red teaming and evaluation, OWASP Top 10 for LLM Applications and guardrail governance.
9. 09AI assurance, audit and post-market monitoring9% of the exam

   • Evaluate the adequacy of AI assurance evidence and lead audits and monitoring of AI systems in operation.
   • Scope: ISO/IEC 42001 certification audits and ISO/IEC 42006, internal audit of AI, evaluation evidence and technical documentation, post-market monitoring (Art. 72), serious incident reporting (Art. 73) and corrective action.
10. 10AI third-party and supply chain governance10% of the exam

    • Lead AI procurement and supplier governance that allocates obligations and risks clearly across the AI value chain.
    • Scope: Vendor and foundation model due diligence, contractual AI clauses, AI bill of materials, downstream provider information duties, ISO/IEC 42001 Annex A supplier controls and shared responsibility for AI risks.
11. 11AI governance performance, literacy and culture13% of the exam

    • Evaluate AI governance effectiveness and lead the cultural and capability changes needed to sustain it.
    • Scope: AI literacy obligations (Art. 4), governance KPIs and KRIs, maturity models, board and executive reporting, ethics escalation and speak-up channels, change management for responsible AI adoption.

Question types

Single choice 100%

Delivery

Online (remote proctored), Test centre, On-site (corporate)

Retakes

Up to three attempts within any 12-month period. A 14-day waiting period applies after a first unsuccessful attempt and 30 days after a second. Each retake requires a new booking and fee. Retakes draw a different randomised form from the question bank.

Provisional cut score — psychometric validation is required before live delivery. Blueprint v1.0.

1. 1

   Register

   Create a free account and start the programme.

2. 2

   Practice

   Online practice test (coming soon).

3. 3

   Training

   Optional

   Online course or classroom — or skip it.

4. 4

   Certification

   Independent exam and certification decision.

Training is optional and does not by itself confer certification. Find a training partner