The best AI governance certification is the one that matches the work you do, and in 2026 there are enough of them that the choice needs a method. The IAPP's AIGP is the broad one. ISACA now has four advanced AI credentials, one of them for governance and still in beta. GARP, the risk managers' association, runs a Risk and AI certificate. PECB certifies people who implement the ISO/IEC 42001 AI management system standard. IEEE certifies professionals in its AI ethics framework. This guide compares them from each body's own pages: who each is for, what it asks before you can hold it, how it is examined and what it costs, then which to choose for which job.
The short answer
- The AIGP (IAPP) is the broad AI governance credential, open to anyone, with no prerequisite: 100 questions in 2.75 hours with a 15-minute break, US$649 for members and US$799 for non-members.
- The AAIG (ISACA) is the closest rival in subject, for enterprise governance leaders with a CGEIT or six years of governance experience. Its beta is closed to applicants, and ISACA publishes no price.
- The AAIR and AAIA (ISACA) sit on top of an existing certification: IT risk for the AAIR, audit for the AAIA. Each costs US$459 for members and US$599 for non-members.
- The RAI (GARP) suits risk professionals: 80 multiple-choice questions in four hours, offered in April and October, with an expected 100 to 130 hours of preparation.
- The ISO/IEC 42001 Lead Implementer (PECB) is for people building an AI management system: a four-day course with the exam on the fifth day, and a credential graded by experience.
- IEEE CertifAIEd certifies the IEEE AI ethics framework, for professionals with at least a year of experience using AI.
AI governance certifications at a glance
| Credential | Body | Who it fits | To qualify | Exam | Fee (where published) |
|---|---|---|---|---|---|
| AIGP | IAPP | Anyone responsible for AI governance | No prerequisite | 100 questions, 2.75 hours with a 15-minute break | US$649 members, US$799 non-members |
| AAIG | ISACA | Enterprise governance leaders | An active CGEIT, or six years of enterprise governance experience with at least one in AI | Beta in progress, closed to applicants | Not published |
| AAIR | ISACA | IT risk professionals | An active listed certification and experience in IT risk or advisory roles | Computer-based | US$459 members, US$599 non-members |
| AAIA | ISACA | IT auditors | A CISA or another qualified designation | Computer-based | US$459 members, US$599 non-members |
| RAI | GARP | Risk professionals | No prerequisite on its page | 80 multiple-choice questions, four hours, April and October | USD 650 to 750 for non-members, by registration window |
| ISO/IEC 42001 Lead Implementer | PECB | People implementing an AI management system | General knowledge of ISO/IEC 42001 for the course; experience for the credential's grade | On the fifth day of the course | Included in the course price |
| CertifAIEd Professional | IEEE | Practitioners applying AI ethics | At least one year of experience using AI | Training, then an exam | Not on the program page |
The AIGP: the broad one
The IAPP's certification index says "AIGP is for professionals in all industries who need to understand and execute responsible AI governance." Its store page describes the exam: "The AIGP exam assesses knowledge of responsible and ethical development, deployment and management of AI systems to ensure safety and trust. It consists of 100 questions and has an allotted time of 2.75 hours with a 15-minute break and must be completed within one year of purchase."
Three things set it apart in this list. It has no prerequisite, so it is the one door open to a lawyer, a product manager or a policy lead without another certification. Its syllabus, the Body of Knowledge, is public and covers the whole field: the foundations of AI governance, how laws, standards and frameworks apply to AI, governing AI development, and governing AI deployment and use. And its syllabus is already in its second version: Body of Knowledge v2.1 has been in force since February 2, 2026.
One fact cuts the other way for some employers. The IAPP's handbook says "The IAPP AIGP, CDPO, CIPP/A and CIPP/C certifications are not accredited by ANAB but still follow the same rigorous policies and procedures to ensure they meet the same high standard of quality." Where a tender asks for an ISO/IEC 17024 accredited credential, that sentence matters. Is the AIGP worth it? weighs the rest.
ISACA's AI credentials: AAIG, AAIR and AAIA
ISACA's AI credentials are advanced credentials that build on an existing one, and three of them sit close to governance.
AAIG, Advanced in AI Governance. This is the one most like the AIGP in subject. ISACA's page calls it "a vendor-neutral certification designed for experienced governance professionals tasked with leading AI adoption and key initiatives at the enterprise level." It is for "ACTIVE ISACA CERTIFIED IN THE GOVERNANCE OF ENTERPRISE IT ® (CGEIT ® ) HOLDERS OR SIX YEARS OF ENTERPRISE GOVERNANCE EXPERIENCE, INCLUDING AT LEAST ONE IN AI". For now it cannot be taken: "The AAIG Beta Application Period Is Now Closed", and its review course and question database are both marked "Coming soon!".
AAIR, Advanced in AI Risk. ISACA's page says "To qualify for AAIR, candidates must hold one of the following designations to enable a focus on the risks and opportunities associated with AI." The list starts with ISACA's own (CISA, CISM, CRISC, CGEIT, CDPSE) and runs on to other bodies' designations, the CISSP and the CIA among them. The page also asks for "PROVEN EXPERIENCE IN IT RISK OR ADVISORY ROLES". Its exam costs "US$459 Member exam cost" and "US$599 Non-Member exam cost".
AAIA, Advanced in AI Audit. "Designed exclusively for professionals with CISA ® or another qualified designation", at the same US$459 and US$599. Our AAIA exam guide covers its exam.
The fourth, the AAISM, is a security management credential for CISM or CISSP holders, which the AAISM guide Best AI security certifications in 2026 covers. AIGP vs ISACA's AAIG, AAISM and AAIA compares all of them with the AIGP side by side.
GARP's RAI: the risk manager's certificate
GARP's page says its "RAI Certificate provides comprehensive coverage of relevant tools and techniques including generative AI, AI risks and risk factors, responsible and ethical AI, and governance frameworks for ensuring AI is deployed effectively and responsibly within organizations."
The exam is fixed in form and date: "The RAI Exam consists of 80 equally weighted, multiple-choice questions. The majority of Exam questions stand alone. Candidates are allowed four hours to complete the Exam." And "The RAI Exam is offered in April and October." GARP's fees page lists the 2027 windows as April 3 to 11 and October 2 to 10, with three price tiers: USD 525 or 625 for FRM, RAI and ERP holders, USD 550 or 650 for individual members and USD 650 or 750 for non-members, the lower figure in each pair for early registration. Registration includes the course material: "RAI Program registration gives candidates complimentary access to the full curriculum and a practice exam, both available via GARP Learning."
It asks more time than the others: "Our expectation is that the average preparation time will be in the range of 100-130 hours." GARP sets no prerequisite on the page and presents the program as "accessible, regardless of your background or training". Its weight is on AI risk in a business setting, with governance frameworks as one part of it, which makes it the natural choice for a financial or enterprise risk professional.
ISO/IEC 42001 Lead Implementer: the management system credential
ISO/IEC 42001 is the AI management system standard, and the AIGP's Body of Knowledge names it among "the core ISO AI standards (i.e., 22989, 42001 and 42005)". This guide reads PECB's page for the personnel credential. It says "The ISO/IEC 42001 Lead Implementer training course provides the participants with the essential competencies needed to effectively plan, implement, manage, monitor, maintain, and continually improve an artificial intelligence management system (AIMS)."
The route is a course with the exam at its end, "Day 5: Certification exam", after four days that run from "Introduction to ISO/IEC 42001 and the initiation of an AIMS implementation" to "AIMS monitoring, continual improvement, and preparation for the certification audit". The course's own prerequisite is light: "The main requirement for participating in this training course is having a general knowledge of the AIMS and ISO/IEC 42001." The credential is not. Passing the exam opens four grades, set by experience, and each also requires signing the PECB Code of Ethics:
| PECB credential | Professional experience | AIMS project experience |
|---|---|---|
| Provisional Implementer | None | None |
| Implementer | Two years, at least one in AI | At least 200 hours |
| Lead Implementer | Five years, at least two in AI | At least 300 hours |
| Senior Lead Implementer | Ten years, at least seven in AI | At least 1,000 hours |
On cost, "Certification and examination fees are included in the price of the training course", and the course price is not on the page. "Candidates who have completed the training course but failed the exam are eligible to retake the exam once for free within 12 months from the initial date of the exam."
The difference from the AIGP is the difference between a standard and a field. The Lead Implementer certifies that you can build one kind of management system to one standard. The AIGP certifies knowledge of AI governance as a whole, ISO/IEC 42001 included as one of the standards it names. AIGP vs ISO 42001 and GARP RAI: which first compares the two in detail, with GARP's RAI.
IEEE CertifAIEd: the ethics credential
IEEE's program "helps individuals and organizations demonstrate responsible AI implementation, rooted in a comprehensive ethical framework encompassing Transparency, Accountability, Algorithmic Bias, and Privacy." Its professional certification "validates that you understand and can apply the IEEE AI Ethics Framework and methodology within your role or domain." It is for "Professionals with 1+ year of experience using AI in business, product development, operations, governance, or analysis", and the path is foundational training, framework application and then "Complete the professional exam to earn the IEEE CertifAIEd™ credential."
Its subject is one organization's ethics framework, and IEEE is the only body here that also certifies products against it, which makes the credential most useful to people who will assess AI systems that way.
Which AI governance certification is best?
The bodies do not rank each other, so the useful question is which one fits your work.
- Privacy, legal, compliance or policy, and no prior certification: the AIGP. It is the only governance-first credential here with no prerequisite, and its syllabus is built around the law.
- IT governance, with a CGEIT or six years at enterprise level: the AAIG, once ISACA opens it beyond the beta; the AIGP covers the same ground now.
- IT risk, holding a CISA, CISM, CRISC, CGEIT, CDPSE or another listed designation: the AAIR.
- IT audit, holding a CISA: the AAIA.
- Financial or enterprise risk: GARP's RAI, if you can give it 100 to 130 hours and one of its two windows a year.
- Building an AI management system to ISO/IEC 42001, or preparing an organization for certification: the Lead Implementer, at the grade your experience allows.
- Assessing AI products against an ethics framework: IEEE CertifAIEd.
Some will want two. A broad credential pairs naturally with a specialist one: the AIGP with the Lead Implementer for someone who must both govern and build to the standard, or with the AAIR or RAI for a risk role.
The best AI governance certification for beginners
Three of the seven have no gate at the door: the AIGP, GARP's RAI and PECB's Provisional Implementer grade, which asks for no experience. Of those, the AIGP has the widest syllabus and a lighter study load than the RAI: the IAPP's study guide recommends a minimum of 30 hours, where GARP expects 100 to 130. ISACA's three require an existing certification, and IEEE asks for a year of experience using AI.
Is there a free AI governance certification?
None of the seven is free: each has an exam fee, a course price or both. What is free is much of the preparation. The IAPP publishes the AIGP's Body of Knowledge and a study guide at no charge, GARP includes its curriculum and a practice exam in the registration fee, and the first competency of our AIGP course is free with an account. AIGP free resources: what costs nothing lists the AIGP's.
How to judge any AI governance certification
Six questions sort a credential worth your time from one that is not, and each can be answered from the body's own pages:
- Who issues it? A professional body with other credentials, a published code of ethics and a disciplinary process.
- Is the syllabus public? The AIGP's Body of Knowledge and GARP's topic list are; a credential with no published syllabus cannot be studied for honestly.
- What does it ask first? A prerequisite narrows who can hold it and tells you its level.
- How is it examined? Number of questions, time, format and how often it is offered.
- How is it kept? Continuing education and fees, or a renewal date.
- Is it accredited? Some employers ask for ISO/IEC 17024 accreditation; check, as the IAPP's handbook does for the AIGP.
Where to start
If the AIGP is the one that fits, its first competency is free in full with a free account: AI and the need for governance, five lessons, 100 questions and 118 flashcards, enough to judge the level before you choose. The rest of the course covers the remaining 12 competencies with practice in the exam's format and a mock in two halves. What the AIGP exam costs in 2026 gives the full price, and AIGP vs CIPP/E, CIPP/US and CIPM covers pairing it with a privacy credential.
By QualExam editorial. Written against the certifying body’s published documents, pinned by hash so a revised edition shows up as a change.