Who It Is For
The CAIGP is the professional credential for practitioners who implement AI governance day to day. It is designed for governance, risk and compliance officers extending into AI, internal auditors and assurance professionals covering AI systems, data protection and privacy professionals with AI responsibilities, and consultants operationalizing AI governance for client organizations.
Exam Specification
| Credential | Certified AI Governance Professional (CAIGP) |
|---|
| Track | Professional Track |
|---|
| Assessment format | Examination (50%) and an applied governance portfolio (50%) |
|---|
| Contact hours | 40 contact hours across 5 days |
|---|
| Certification fee | USD 2,400 |
|---|
| Validity | 3 years from award date |
|---|
| Renewal | 45 CPD hours per 3-year cycle, logged with AICA |
|---|
| Retake policy | Reattempt after a 14 day waiting period, up to 3 attempts in any 12 months |
|---|
| Delivery | Through Authorized Training Partners, online or center-based |
|---|
| Verification | Cryptographic registry entry, QR-verifiable digital badge, Open Badges 3.0 |
|---|
Exam duration and question counts are set in the Candidate Handbook and are not published here. The full proctoring, retake, appeals, renewal and revocation terms are on the exam policies page.
Course Learning Objectives
- Operationalize an approved AI policy into procedures, control checklists and evidence outputs that named owners can execute.
- Document model risk and construct impact assessments that are accurate, proportionate to the risk tier of each system, and defensible before a risk committee.
- Construct a regulatory obligations register that maps requirements from the EU AI Act, the NIST AI RMF and ISO/IEC 42001 to specific systems, and operationalize it as recurring compliance workflows.
- Construct and maintain a complete AI inventory, including discovered shadow AI, with lifecycle controls attached at every stage from approval to retirement.
- Assemble and maintain an audit evidence library, assess audit readiness against the applicable framework, and manage findings to verified closure.
- Construct and rehearse an incident response runbook for AI systems, and document incidents to a standard that supports regulatory notification and later audit.
- Assess drift between documented governance and actual practice, and maintain the full artifact set as regulation and the organization's AI estate change.
Learning Units
LU1: AI Policy Implementation
6 contact hours
- LO 1.1Translate an approved AI policy into operating procedures, control activities and checklists that named owners can execute on a defined cycle.
- LO 1.2Detect drift between documented policy and actual practice, and construct a remediation plan prioritized by risk.
LU2: Model Risk Documentation & Impact Assessments
8 contact hours
- LO 2.1Produce a model risk documentation pack for an AI system covering purpose, data, performance, limitations and known failure modes.
- LO 2.2Conduct an AI impact assessment using a structured template, scaled to the risk of the system being assessed.
- LO 2.3Maintain a model risk register that stays current as systems and their uses change.
LU3: Regulatory Mapping & Compliance Workflows
7 contact hours
- LO 3.1Construct a regulatory obligations register mapping applicable requirements to specific AI systems and named owners.
- LO 3.2Build the recurring compliance workflows, reviews, attestations, renewals and reporting, with a maintenance routine that keeps the register current as regulation and the AI estate change.
LU4: AI Inventory & Lifecycle Controls
6 contact hours
- LO 4.1Construct an AI inventory record capturing systems, owners, data, risk tier and status, including discovery of unregistered systems.
- LO 4.2Attach lifecycle controls at each stage, from approval and deployment through change management to retirement.
LU5: Audit Preparation & Evidence Management
7 contact hours
- LO 5.1Assemble and maintain an audit evidence library that is organized, current and retrievable on request.
- LO 5.2Run a pre-audit readiness check against the applicable framework and manage findings to verified closure with documented remediation.
LU6: Incident Response for AI Systems
6 contact hours
- LO 6.1Construct an AI incident response runbook covering triage, severity rating, containment, notification and documentation.
- LO 6.2Run a tabletop exercise of the runbook and convert the lessons into control improvements.
Assessment Blueprint
| Learning Unit | Weighting |
|---|
| LU1: AI policy implementation | Exam 8% + portfolio 7% (15%) |
| LU2: Model risk documentation & impact assessments | Exam 9% + portfolio 11% (20%) |
| LU3: Regulatory mapping & compliance workflows | Exam 9% + portfolio 6% (15%) |
| LU4: AI inventory & lifecycle controls | Exam 7% + portfolio 8% (15%) |
| LU5: Audit preparation & evidence management | Exam 9% + portfolio 9% (18%) |
| LU6: Incident response for AI systems | Exam 8% + portfolio 9% (17%) |
| All units, both components | Exam 50% + portfolio 50% (100%) |
Weightings are indicative of emphasis across the two assessment components. Certification decisions are made independently by the AICA Certification and Standards Authority against the published competency benchmarks, separate from training delivery.
Credential Terms
| Credential validity | 3 years from award date. |
|---|
| Renewal | Via Continuing Professional Development: 45 CPD hours per 3-year cycle, logged with AICA. |
|---|
| Retake | Reattempt after a 14 day waiting period, with a maximum of 3 attempts in any 12 months. |
|---|
| Appeals | Assessment and certification decisions may be appealed to AICA's Certification and Standards Authority. |
|---|
| Proctoring | Examinations are proctored, online or center-based through Authorized Training Partners. |
|---|
| Conduct | Certification requires agreement to the AICA Code of Professional Conduct. |
|---|
Verification
Every CAIGP credential is issued with a unique credential identifier recorded in the AICA verification registry, a QR-verifiable digital badge, and an Open Badges 3.0 export. Each credential is signed with the AICA registry key and recorded in a public transparency log, so any employer can check it against its live registry record. Verify any credential at aicauthority.org/verify.
