Artificial Intelligence Governance Professional (AIGP)

What to Expect on the AIGP  Exam

The AIGP is 100 multiple-choice questions, and you get 2 hours 45 minutes to finish, with a built-in 15-minute break. IAPP doesn’t publish a fixed pass score as a flat percentage — scoring is scaled — and the organization doesn’t release an official pass rate, so treat any “X% pass rate” claim you see elsewhere with skepticism.

You can sit it two ways: in person at a Pearson VUE test center, or remotely through Pearson VUE’s OnVue online proctoring. Once you buy your exam, you have one year to actually take it, so don’t purchase before you’re genuinely close to ready.

Question style sits mostly at the “understand” and “apply” level on Bloom’s Taxonomy, per IAPP’s own framing — expect a lot of “which of the following best describes” and “a company is doing X, what governance gap exists” scenarios rather than pure definition recall, though foundational terminology questions do show up, especially in Domain I.

Domain Breakdown

IAPP restructured the AIGP from seven domains down to four in February 2025, and refreshed the content again under Body of Knowledge version 2.1, effective February 2, 2026. If you’re studying from material written before that date, confirm it reflects v2.1 — the rewrite shifted weight toward third-party governance, vendor contract review, and data governance obligations. IAPP publishes min/max question counts per domain rather than fixed percentages, so here’s the current blueprint:

Domains III and IV together make up roughly half the exam, and both are heavily scenario-based — they test whether you can apply governance controls across the AI lifecycle, not just recite what a control is.

The Topics Candidates Consistently Underestimate

Domain II’s specific law-to-AI mapping. It’s not enough to know GDPR or the EU AI Act exist. The exam expects you to connect specific legal mechanisms — purpose limitation, data minimization, automated decision-making rights — directly to AI use cases, and to distinguish provider obligations from deployer obligations under the EU AI Act’s risk tiers. Candidates with a privacy background often assume this transfers automatically; it mostly does, but AI-specific nuances (general-purpose AI model requirements, conformity assessments) catch people who skim.

Third-party and vendor governance, under v2.1. This got measurably heavier in the 2026 blueprint update. Expect questions on evaluating vendor or licensing agreement terms, assessing a company’s own liability when deploying someone else’s proprietary model versus building in-house, and documenting data lineage from third-party sources.

The difference between Domain III and Domain IV framing. Both domains cover monitoring, auditing, and incident management — but III applies those activities to a system you’re building, and IV applies them to a system you’re deploying (your own or a vendor’s). Questions will sometimes present the same governance activity twice across different domains with a different actor, and picking the right domain’s emphasis matters for scenario questions.

How to Use Practice Tests Effectively for AIGP  Exam

Because IAPP doesn’t publish exact domain percentages (only question ranges), don’t over-index your prep on any single domain based on a precise number you saw in a third-party blog — treat the published min/max ranges as the  signal and weight your practice accordingly: Domains III and IV deserve noticeably more reps than Domain I, even though Domain I feels like the “easy” starting point and tempts people to over-study it.

When you miss a practice question, check which competency it falls under (I.A, II.C, III.B, etc. — IAPP’s Body of Knowledge lists these explicitly) rather than just noting the domain. The BoK breaks each domain into three or four competencies with their own performance indicators, and weak spots often cluster in one specific competency rather than spreading evenly across a domain.

Common Mistakes That Cause Retakes

• Studying from Body of Knowledge v1.0 or v2.0.1 material instead of the current v2.1, which took effect February 2, 2026 — older guides miss the added weight on third-party governance and updated data governance content.

• Treating this as a pure compliance/legal exam and neglecting Domain III’s technical governance content (model cards, red teaming, bias and interpretability testing, training/testing documentation).

• Underestimating Domain I because it “feels” introductory, then losing points on nuanced items like distinguishing AI developers, providers, deployers, and users from a governance accountability perspective.

• Running out of time on scenario-heavy later domains because early domains got more careful reading than the clock allowed for.

AIGP  Study Timeline by Starting Experience Level

Beginner (new to AI governance, privacy, or compliance work): IAPP’s official minimum is 30 hours, but most candidates without a privacy or compliance background report needing closer to 50+ hours. Budget 6–8 weeks of consistent study, starting with the free Body of Knowledge and exam blueprint before adding paid courses or practice exams.

Has related experience (privacy, compliance, risk, or legal background): 3–4 weeks, front-loaded on Domains III and IV where AI-specific technical governance content will be less familiar than the legal/regulatory material in Domain II.

Retaking: Pull apart your score report by domain if IAPP provides one, and revisit the specific competencies (not just domains) where you missed questions — the BoK’s competency breakdown is the most precise diagnostic tool available since IAPP doesn’t publish a detailed public item bank.

What Changes Most Often on AIGP Exam

This is one of the most actively revised certifications on the market right now, which makes sense given the pace of AI regulation. The domain structure dropped from seven domains to four in February 2025, and the content itself was refreshed again under BoK v2.1 in February 2026, with IAPP explicitly flagging that candidates testing on or after that date need to account for new material. IAPP states it reviews the Body of Knowledge annually and commits to notifying candidates at least 90 days before new content appears on the exam — worth checking the official AIGP page periodically if your test date is more than a few months out.