What is the AIGP certification?

The IAPP AI Governance Professional (AIGP) is an individual certification for professionals managing AI governance programmes. It covers risk assessment across NIST AI RMF, ISO 42001, and the EU AI Act, data governance, AI ethics, vendor management, and AI incident response. It is currently the most widely recognised individual credential in AI governance.

What is ISO 42001 and who needs it?

ISO 42001:2023 is an international standard for AI Management Systems (AIMS). It certifies organisations - not individuals - that have implemented a governance system meeting the standard's requirements for AI risk assessment, performance evaluation, and improvement processes. Enterprise AI vendors targeting regulated sectors increasingly need ISO 42001 to pass procurement qualification.

Is ISO 42001 certification required for EU AI Act compliance?

ISO 42001 is not directly required by the EU AI Act, but it can serve as supporting evidence in the conformity assessment process for high-risk AI systems. Organisations that are already ISO 42001 certified have documented governance processes that align with many of the EU AI Act's Article 9 risk management requirements.

What is the difference between AIGP and ISO 42001?

AIGP certifies individuals - it demonstrates that a person has the knowledge and skills to manage an AI governance programme. ISO 42001 certifies organisations - it demonstrates that an organisation's AI management system has been independently audited and meets the international standard. Both are needed for a mature AI governance programme: ISO 42001 for the organisation, AIGP for the practitioners managing it.

How do I prepare for the AIGP exam?

AIGP preparation should cover four areas: (1) the NIST AI RMF 1.0 and its four functions in depth, (2) the EU AI Act's risk classification system and high-risk obligations, (3) GDPR's interaction with AI processing, particularly Article 22, and (4) ISO 42001's management system structure. The IAPP provides an official body of knowledge and practice exams. Expect scenario-based questions requiring applied governance judgement, not just framework recall.

AI Governance Certification in 2026: AIGP, ISO 42001, and…

Three credentials, two standards, one question: which certification demonstrates real governance capability?

Why AI Governance Certification Matters in 2026

Two years ago, "AI governance" was a job title that lived in strategy documents. In 2026, it is a procurement requirement. Enterprise AI deployment now routinely requires documented governance qualifications - for the teams building AI systems, for the teams overseeing them, and increasingly for the organisations certifying their AI products to regulators. The EU AI Act imposes technical documentation, conformity assessment, and ongoing monitoring obligations on high-risk AI providers. The NIST AI RMF requires organisations to assign "AI risk owners" with expertise in risk management. ISO 42001 requires an AI Management System with qualified internal auditors. Each of these requirements creates a demand for people who can demonstrate, on paper, that they know what they're doing. That's what certification provides.

The IAPP AIGP: Governance as a Practice

The IAPP AI Governance Professional (AIGP) certification is the most widely recognised individual credential in AI governance. It covers:

AI risk assessment methodologies across multiple frameworks (NIST AI RMF, ISO 42001, EU AI Act)
Data governance principles and their intersection with AI training and deployment
AI ethics frameworks and bias identification/mitigation strategies
Procurement and vendor management of third-party AI systems
Incident response for AI failures and the regulatory notification obligations that follow

The AIGP examination tests application, not just recall - candidates must be able to assess a scenario and identify the correct governance response under applicable frameworks. The pass rate is approximately 65%, reflecting meaningful rigour. Who needs it: Privacy and compliance professionals expanding into AI governance, legal counsel advising AI deployers, and AI ethics officers in regulated industries. The AIGP is primarily a practitioner credential - it demonstrates you can manage an AI governance programme, not that your organisation's AI system is compliant.

ISO 42001: Organisational Certification for AI Management Systems

ISO 42001:2023 is an international standard for AI Management Systems (AIMS). Unlike the AIGP, which certifies individuals, ISO 42001 certifies organisations. An ISO 42001 certification means the organisation has implemented and had independently audited a management system that meets the standard's requirements for:

Leadership commitment and AI policy establishment
Risk and impact assessment processes for AI systems
Objectives and performance evaluation for AI governance
Improvement processes for correcting AI governance failures
Supply chain controls for AI components and third-party models

ISO 42001 certification is achieved through third-party audit by an accredited certification body (the same bodies that issue ISO 27001 and ISO 9001 certificates). The audit cycle is three years with annual surveillance audits. Who needs it: Organisations building or deploying AI systems in enterprise markets where customers require supply chain assurance. EU AI Act Annex III providers seeking to demonstrate conformity may use ISO 42001 as supporting evidence. AI vendors targeting regulated-sector customers (banking, healthcare, defence) will increasingly need this credential to pass procurement qualification.

EU AI Act Compliance Specialist: The Regulatory Specialisation

Multiple training providers have launched EU AI Act compliance specialist designations in 2025-2026. These are not standardised - each body has its own curriculum. The strongest programmes cover:

Risk classification methodology under Articles 6, 7, and Annex III
Technical documentation requirements under Annex IV, including what each section must contain
Conformity assessment procedures for self-assessment (Annex VI) and third-party assessment
EU database registration process and ongoing obligations
Interaction with existing frameworks: GDPR, MDR, AI Liability Directive

Who needs it: Lawyers and compliance officers advising AI providers seeking to place products on the EU market, product managers at AI companies building compliance programmes, and technical consultants conducting conformity assessments.

The Framework Coverage Gap: What Certifications Don't Cover

All three credentials share a limitation: they teach governance frameworks, not the substance of the regulations themselves. An AIGP holder knows how to run a risk assessment process. They may not know that Article 22 GDPR prohibits automated credit decisions without a human review mechanism, or that NIST AI RMF GOVERN requires documented AI risk tolerance at the board level before any high-risk deployment. This is the coverage gap that practitioners hit in practice: the credential proves process capability; the job requires substantive regulatory knowledge. The two are complementary - and the most effective AI governance professionals have both.

How Bidda Supports Certification Preparation and Implementation

Bidda's AI governance nodes provide the substantive regulatory knowledge layer that certification training leaves to self-study. The ISO 42001 nodes decompose the standard's requirements into specific implementation obligations - the ISO 42001 performance evaluation node specifies the exact indicators, monitoring frequencies, and documentation required under Clause 9. The NIST AI RMF nodes provide the specific actions required under each function. These are not summaries - they are primary-source-verified reference nodes that practitioners can cite in conformity documentation and use to cross-check their governance programmes against the actual standard text.

AI Governance Certification in 2026: AIGP, ISO 42001, and What Actually Qualifies You