AI governance
AIGP exam prep.
Know what to study next.
Free lessons. A diagnostic that finds your weak areas. Practice with an explanation for every answer.
Start free. No account needed.
Independent study material for AIGP. Study in your browser, at your own pace.
AIGP study guideYour next study session
Free to startA clear place to start
10 questions.
A more focused study plan.
See which topics need your attention, then go straight to the lessons that help.
Find my weak areasInside the study libraryShort lessons. Clear explanations.
01The AI system development life cycle02The AI family tree03Architectures and the buzzwords that matterBrowse all 127 study resourcesAI governance
AIGP study guide and practice questions
Free lessons on every topic in the published AIGP outline, a ten-question diagnostic that shows your weak areas, and a 129-question practice bank with worked explanations. Written by someone who passed the exam.
Practice question bank
129 exam-style questions for $29, once.
A 100-question timed practice set, a worked explanation for every answer and weak-area tracking. No subscription. Try nine sample questions free before you decide.
Continue studying
Start with the guide
Current 2026 outline
Four AIGP knowledge areas
Our eight teaching modules are a learning sequence. Use this four-area crosswalk to follow the current IAPP outline.
- I. Understanding the foundations of AI governance18 cross-referenced lessons
- II. Understanding how laws, standards and frameworks apply to AI17 cross-referenced lessons
- III. Understanding how to govern AI development40 cross-referenced lessons
- IV. Understanding how to govern AI deployment and use31 cross-referenced lessons
Core study guide
Module 1: Foundations of AI14 lessons
- What is AI
- Why AI needs a comprehensive governance approach
- The intelligence ladder: ANI to ASI
- OECD Framework for the Classification of AI Systems
- Tech megatrends and AI
- Use cases and benefits
- Four building-block terms
- The AI family tree
- The four ways machines learn
- Five algorithms to recognise on sight
- Architectures and the buzzwords that matter
- Model face-offs the exam loves
- Expert systems
- The AI system development life cycle
Module 2: AI Impacts & Responsible AI15 lessons
- AI impacts and responsible AI
- Who gets harmed: the five targets
- Harms taxonomies 101
- Three privacy harms taxonomies
- Three AI harms taxonomies
- Individual harms and the anatomy of bias
- Group and societal harms
- Environmental harms
- Organisational harms
- The FIPs: where all of this started
- The five OECD AI Principles
- Seven ethical issues and three foundational controls
- Ethics by design
- Trustworthy AI: the HAT test
- Creating ethical AI in practice
Module 3: Governance & Risk Management17 lessons
- What AI governance actually is
- The four roles: developers, providers, deployers, users
- Tailoring governance: six differentiators
- Life cycle policies and the use case assessment
- Governance structure: build it, then pick a model
- Stakeholders: who sits at the table
- Winning leadership support
- Training, awareness and AI literacy
- Culture and operationalising responsible AI
- Aligning risk strategies
- Business, regulatory and legal risks
- The four AI risk categories
- Calculating risk
- Risk assessment mechanics
- AI impact assessments and ISO 42005
- NIST AI RMF: the full kit
- ISO 42001 and HUDERIA
Module 4: AI Regulation16 lessons
- AI regulation across jurisdictions
- The four regulated roles
- The risk classification framework
- Prohibited risk and the banned list
- High risk - where most regulation lives
- Limited risk and minimal risk
- The eight requirements for high-risk AI
- High-risk provider obligations
- Deployers, importers and distributors
- Conformity assessments, registration and notification
- General-purpose AI models
- The EU AI Act and the Digital Omnibus
- South Korea's AI Basic Act
- The United States - orders, guidance and state laws
- China, Japan and the rest of the world
- Enforcement and penalties
Module 5: Existing Laws & AI14 lessons
- The Lay of the Land
- Privacy Principles That Govern AI
- The GDPR and AI
- Article 22 and Automated Decision-Making
- Anonymisation, Pseudonymisation and PETs
- The EDPB Opinion on AI Models (2024)
- Obligations on Data Controllers
- Sensitive and Special Categories of Data
- Intellectual Property and AI
- Licensing AI Models and Data
- Nondiscrimination Laws Across Five Sectors
- Consumer Protection Laws and AI
- Product Liability Foundations
- The Revised Product Liability Directive
Module 6: Governing AI Development15 lessons
- The AI Development Life Cycle Revisited
- Planning Essentials - The Five Moves
- Stakeholders - Who, What, and the Hard Calls
- Operational Controls - Five Owners to Name
- Impact Assessments in the Design Phase
- The Six Risk Assessment Strategies, In Order
- Governing the AI Data Life Cycle
- Data Questions, Quality, Jurisdiction and Lineage
- Data Formats and the Five V's
- Wrangling the Data
- Features and Feature Engineering
- Building, Training and the Three Lines of Defence
- Testing and Validation
- Metrics, Thresholds, Audits and Monitoring
- Documentation, Communication and Decommissioning
Module 7: Governing AI Deployment15 lessons
- Governing AI deployment
- Adapting existing policies for AI
- Where the model lives - three environments
- GenAI choices and the pre-launch checklist
- Agentic AI - what it is
- The agentic risk landscape
- The three-tier guardrail framework
- Deploying a proprietary model
- Third-party products and risk
- The vendor / open-source agreement checklist
- Release readiness
- Periodic assessment - performance, reliability, safety
- Public disclosures and transparency obligations
- Monitoring, maintenance and drift
- Incidents, consequences and accountability