An AI governance certification is a personal credential, earned by passing an exam, that shows you can govern how an organization builds or uses AI. The main options for US professionals are the IAPP AIGP, an ISO/IEC 42001 Lead Implementer or Lead Auditor credential, ISACA’s new AI credentials and CompTIA SecAI+. In 179 US AI governance job postings we analyzed (AI Training Skool Pay Index, Indeed, October 2026), 71 (40%) named the ISO/IEC 42001 standard and 24 (13%) named the AIGP.
None of these credentials is the best for everyone. Each proves something different, and three of ISACA’s require a certification you already hold. The table sets them side by side.
The first table gives the facts for each credential; the second shows what each one proves and who it suits.
| Credential | Issuer | ISO/IEC 17024 status | Exam | Prerequisites | Price (US$) | Renewal |
| ISO/IEC 42001 Lead Implementer (AI Training Skool route) | Global AI Certification Council; AI Training Skool is an Authorized Training Partner | Not 17024; the training is CPD accredited by the CPD Standards Office (UK) | 60 scenario-based questions, 90 minutes, closed book, online proctored, 70% to pass | 32 contact hours of structured ISO/IEC 42001 training; no prior ISO or AI experience | 795, course with exam and two attempts | 3 years, 32 CPD credits |
| ISO/IEC 42001 Lead Implementer (other schemes) | The certification body that runs each scheme | Varies; at least one scheme is UKAS-accredited under 17024 | Varies by scheme | Varies by scheme | Varies by scheme | Varies by scheme |
| ISO/IEC 42001 Lead Auditor | The certification body that runs each scheme | Varies; at least one scheme is UKAS-accredited under 17024 | Varies by scheme | Varies by scheme | Varies by scheme | Varies by scheme |
| AIGP (Artificial Intelligence Governance Professional) | IAPP | Not on IAPP’s list of ANAB-accredited credentials | 100 questions (85 scored), 2 hours 45 minutes plus an optional 15-minute break | None | 649 member, 799 non-member, exam only | 2 years, 20 CPE credits; 250 fee per term for non-members |
| AAIA (Advanced in AI Audit) | ISACA | Not stated on ISACA’s AAIA page | 90 questions, 2.5 hours, 450 on a 200 to 800 scale | Active CISA, or CIA, US CPA or another listed accounting designation | 459 member, 599 non-member, plus 50 application fee | 10 CPE a year, 30 over 3 years; 20 or 35 annual fee |
| AAISM (Advanced in AI Security Management) | ISACA | Not stated on ISACA’s AAISM page | Not stated on ISACA’s AAISM page | Active CISM or CISSP | 459 member, 599 non-member, plus 50 application fee | 10 CPE a year, 30 over 3 years; keep CISM or CISSP active |
| AAIR (Advanced in AI Risk) | ISACA | Not stated | Computer-based; question count not stated | One of the listed certifications, such as CRISC, CISA, CISM, CGEIT, CDPSE or CISSP, plus IT risk experience | 459 member, 599 non-member, plus 50 application fee | ISACA CPE policy |
| AAIG (Advanced in AI Governance), beta | ISACA | Not stated | Not stated | Active CGEIT, or 6 years of enterprise governance experience including 1 year in AI | 399 beta exam | Not stated |
| SecAI+ | CompTIA | Not stated on CompTIA’s SecAI+ page | Up to 60 multiple-choice and performance-based questions, 60 minutes, 600 on a 100 to 900 scale | None required; 3 to 4 years in IT and 2 or more in cybersecurity recommended | Not listed on the certification page | 3 years, 15 CEUs |
| Online Certificate in AI Governance and Compliance | Georgetown University School of Continuing Studies | Not applicable | No exam; assignments, case studies and a capstone | Bachelor’s degree or equivalent | 2,995 | None stated |
Sources: our own course and exam; iapp.org (AIGP page, AIGP exam store page, AIGP candidate handbook, accreditation page); isaca.org (AAIA, AAISM, AAIR and AAIG pages, AAIA candidate guide, AAIA and AAISM maintenance pages); comptia.org (SecAI+ page, CE requirements); scs.georgetown.edu; UKAS schedule of accreditation (August 2026). Other ISO/IEC 42001 schemes set their own exams, prices and renewal rules.
| Credential | Type | What it proves | Best for |
| ISO/IEC 42001 Lead Implementer | Certification | You can build and run an AI management system (AIMS) | GRC, security, risk and product people who will own the records |
| ISO/IEC 42001 Lead Auditor | Certification | You can plan and lead an audit of an AIMS | Internal auditors and certification body auditors |
| AIGP | Certification | Knowledge of AI governance across laws, frameworks and the AI life cycle | Privacy, legal and policy roles |
| AAIA | Certification | You can audit AI systems and AI risk | IT auditors who already hold CISA, CIA or CPA |
| AAISM | Certification | You can manage AI security risk and policy | Security managers |
| AAIR | Certification | You can manage AI risk across its life cycle | Risk managers who hold CRISC or similar |
| AAIG | Certification (beta) | You can lead AI adoption at enterprise level | Senior governance professionals |
| SecAI+ | Certification | You can secure AI systems and use AI in security work | Hands-on security practitioners |
| Georgetown certificate | Certificate program (noncredit) | You completed a six-week course | People who want structured teaching and a university name |
“What it proves” and “Best for” are AI Training Skool’s reading of each issuer’s stated scope and prerequisites. Anyone whose employer requires ISO/IEC 17024 should pick a scheme accredited under it.
Certification, Certificate Program or Company Certification: Three Different Things
An AI governance certification, a certificate program and an ISO/IEC 42001 certificate for a company are three different things, and most confusion on this topic comes from mixing them.
- A certification is awarded to a person who passes an exam set by a certification body, and it usually has to be renewed with continuing education. The AIGP, the ISACA credentials, SecAI+ and ISO/IEC 42001 Lead Implementer and Lead Auditor credentials are all certifications.
- A certificate program is a course. You get a certificate for completing it, not for passing an independent exam. The Georgetown program in the table is a noncredit professional certificate: six weeks, a weekly two-hour evening Zoom session and a capstone project, with 3.2 continuing education units (32 contact hours).
- Organizational certification applies to a company, not a person. A company’s AI management system is certified against ISO/IEC 42001:2023 on iso.org, the AIMS standard published in December 2023, by an accredited certification body. ISO itself does not certify anyone.
So when a posting asks for “ISO 42001 certification”, read whether it wants a person who holds a credential or someone who can get the company certified. The person’s route is the individual ISO 42001 Lead Implementer certificate or its auditor counterpart.
Which AI Governance Certifications Are Accredited Under ISO/IEC 17024?
Few of them, as of October 2026. ISO/IEC 17024 sets the requirements for bodies that certify people. Its third edition, published on 31 March 2026, added rules on the use of AI inside certification itself, such as human oversight of AI-generated results.
The IAPP says its CIPM, CIPP/E, CIPP/US and CIPT credentials are accredited by the ANSI National Accreditation Board (ANAB) under ISO/IEC 17024. The AIGP is not on that list on IAPP’s accreditation page. ISACA’s AAIA and AAISM pages and CompTIA’s SecAI+ page do not mention ISO/IEC 17024 accreditation for those credentials. For ISO/IEC 42001, the UKAS schedule of accreditation issued on 27 August 2026 lists one personnel certification body’s ISO/IEC 42001 Lead Implementer and Lead Auditor schemes under ISO/IEC 17024.
Our own route is not 17024. The AI Training Skool course is CPD accredited by the CPD Standards Office (UK), which accredits the training. ISO/IEC 17024 accreditation applies to a certification body and its named schemes. If your employer or a regulator requires 17024, ask for that in writing and start with choosing an accredited ISO 42001 Lead Implementer scheme.
Most US employers do not ask. None of the 179 postings in our Pay Index mentioned ISO/IEC 17024 or asked for an accredited certification. They named credentials and frameworks instead.
What US Employers Name in AI Governance Job Postings
US AI governance postings name established security, risk and privacy certifications far more often than any AI-specific credential. The ISO/IEC 42001 standard is the most-named AI item, but postings rarely ask for an ISO/IEC 42001 credential by name.
| Named in the posting text | Postings (of 179) | Share |
| ISO/IEC 42001 (the standard) | 71 | 40% |
| CISSP | 48 | 27% |
| CRISC | 36 | 20% |
| CISM | 35 | 20% |
| CIPP (any) | 35 | 20% |
| AIGP | 24 | 13% |
| CIPM | 19 | 11% |
| CIPT | 10 | 6% |
| CGEIT | 4 | 2% |
| An ISO/IEC 42001 Lead Implementer or Lead Auditor credential by name | 3 | 2% |
| ISACA AAIA or AAIR | 3 | 2% |
| CompTIA SecAI+ | 1 | 1% |
| ISACA AAISM | 0 | 0% |
Source: AI Training Skool AI Governance Pay Index, 179 US Indeed postings from 161 employers. One of the two searches behind the index targeted ISO 42001, which lifts that row. CISA is left out because the same letters also match the US federal agency.
Three readings follow. First, the AI credentials are new, and employers still write job ads around the credentials they know. Second, employers name ISO/IEC 42001 as work to be done, not as a badge to hold, so the skill the posting wants is building and evidencing an AIMS. Third, pay follows level, role family and experience more than any credential. Postings naming ISO/IEC 42001 had a $168,000 median advertised midpoint and those naming the AIGP $156,000, against $169,000 for all postings with pay. The full breakdown is in the AI governance pay benchmark.
ISO/IEC 42001 Lead Implementer and Lead Auditor Credentials
ISO/IEC 42001 credentials are the only ones on this page tied to a single management system standard, and they come in two tracks. A Lead Implementer builds and runs the AIMS. A Lead Auditor checks one against the standard, either inside the company or for a certification body. The difference is set out in building an AIMS versus auditing one.
On our route, the Lead Implementer exam has 60 scenario-based questions in 90 minutes, closed book, with 70% to pass. Domain II, implementation and operational control of the AIMS, carries about 40% of the exam. The certificate and badge are issued by the Global AI Certification Council and are valid for three years, renewed with 32 CPD credits. Other schemes set their own exams, prices and rules, which is why the table says they vary.
If you only need to audit, read about the audit side of ISO 42001, including the audit experience certification bodies ask for. Many providers also sell a shorter Foundation credential. Check if you need ISO 42001 Foundation first; on our route, you do not.
IAPP AIGP for Privacy, Legal and Policy Roles
The IAPP AIGP is the AI-specific credential US postings name most often, 24 of 179 in our data, and it tests breadth. IAPP describes it as demonstrating competency in AI development, ethical AI deployment and AI management best practice, with knowledge of how laws apply to AI. The exam fee is $649 for IAPP members and $799 for non-members, and the credential renews every two years.
The AIGP rarely appears alone in a posting. In our data, 20 of the 24 postings that named it also named an IAPP privacy credential or the ISO/IEC 42001 standard. The exam format, upkeep costs and when to hold both are covered in the AIGP and ISO 42001 credentials side by side.
ISACA’s AI Credentials: AAIA, AAISM, AAIR and AAIG
ISACA’s AI credentials are add-ons for people who already hold an ISACA or equivalent certification. Each one requires a qualifying credential or long governance experience before you can be certified.
- AAIA, Advanced in AI Audit, launched 19 May 2025. It requires an active CISA, or a CIA, US CPA or another listed accounting designation with an IT audit focus. The ISACA AAIA exam, per ISACA’s candidate guide, has 90 questions in 2.5 hours across three domains: AI governance and risk (33%), AI operations (46%) and AI auditing tools and techniques (21%).
- AAISM, Advanced in AI Security Management, launched 19 August 2025. The ISACA AAISM requires an active CISM or CISSP, which you must keep active to hold the AAISM. It covers AI governance and program management, AI risk management, and AI technologies and controls.
- AAIR, Advanced in AI Risk, launched 15 April 2026. It requires one of the certifications ISACA lists, such as CRISC, CISA, CISM, CGEIT, CDPSE or CISSP, plus experience in IT risk or advisory roles.
- AAIG, Advanced in AI Governance, is in beta as of October 2026. It requires an active CGEIT, or six years of enterprise governance experience including at least one year in AI. The beta exam costs $399.
The AAIA, AAISM and AAIR exams cost $459 for members and $599 for non-members. Holders of the AAIA and AAISM report 10 CPE hours a year and 30 over three years, and pay an annual maintenance fee of $20 for members or $35 for non-members.
CompTIA SecAI+ for Hands-On Security Staff
CompTIA SecAI+ is a technical security credential with an AI governance slice, not a governance credential. The CompTIA SecAI+ exam, code CY0-001, launched on 17 February 2026. It has up to 60 multiple-choice and performance-based questions in 60 minutes, with a passing score of 600 on a 100 to 900 scale.
Its four domains are basic AI concepts related to cybersecurity (17%), securing AI systems (40%), AI-assisted security (24%) and AI governance, risk and compliance (19%). CompTIA recommends three to four years in IT and at least two in hands-on cybersecurity, and the credential renews with 15 continuing education units over three years. The US price was not listed on the certification page when we checked.
University Certificate Programs in AI Governance
University certificate programs teach AI governance in a structured course but do not certify you through an independent exam. Georgetown University’s School of Continuing Studies, for example, offers an Online Certificate in AI Governance and Compliance. It runs six weeks online, costs $2,995 including materials and is open to anyone with a bachelor’s degree or equivalent.
A program like that suits people who want live teaching and a university name on a resume. It does not replace a certification where a posting names one. The program page states no renewal or continuing education requirement, so it shows what you learned at one point in time.
Which AI Governance Certification Fits Your Background
Pick the credential that matches the work you will be judged on, then check whether you already hold its prerequisite. Use the rules below by background.
| Your background | Choose this if | Choose this instead if |
| Privacy or legal | AIGP, if you advise on several AI laws and frameworks, often after a CIPP | ISO/IEC 42001 Lead Implementer, if your company is pursuing ISO/IEC 42001 certification and you will run the impact assessments |
| Audit | AAIA, if you hold CISA, CIA or a CPA and audit AI across the business | ISO/IEC 42001 Lead Auditor, if you will audit an AIMS against the standard, internally or for a certification body |
| Security | AAISM, if you hold CISM or CISSP and manage security programs | SecAI+, if your work is hands-on securing of AI systems; ISO/IEC 42001 Lead Implementer, if you already run ISO/IEC 27001 and are extending it to AI |
| GRC and compliance | ISO/IEC 42001 Lead Implementer, if you will build the register, assessments and Statement of Applicability | AAIR, if you hold CRISC and own an enterprise AI risk program |
| Product or technical lead | ISO/IEC 42001 Lead Implementer, if you own deployment approvals, monitoring and evidence for AI systems | SecAI+, if your role is technical security rather than governance |
| Senior governance leader | AAIG, once it leaves beta, if you hold CGEIT | AIGP, if your remit is policy across jurisdictions |
Decision rules: AI Training Skool, based on each issuer’s stated prerequisites and the Pay Index postings.
If you have no compliance, privacy, security, audit or technology background yet, a credential will not carry you on its own. Postings in our index that stated an experience minimum asked for a median of six years. Start by building AI governance experience in your current job and take the credential that fits the work you end up doing.
If the work you want is building an AI management system, our ISO/IEC 42001 Lead Implementer training priced at US$795 includes 16 modules, 32 CPD hours, a case study workbook, an exam simulator and two exam attempts.
Frequently Asked Questions
What Is the Best AI Governance Certification?
There is no single best one. The IAPP AIGP suits privacy, legal and policy roles, and an ISO/IEC 42001 Lead Implementer credential suits people who build an AI management system. ISACA’s AAIA, AAISM and AAIR suit auditors, security managers and risk managers who already hold a qualifying certification. In our October 2026 Pay Index, 40% of 179 US postings named ISO/IEC 42001 and 13% named the AIGP.
Is There an AI Governance Certification With No Prerequisites?
Yes. IAPP states no experience prerequisite for the AIGP, CompTIA only recommends experience for SecAI+, and our ISO/IEC 42001 Lead Implementer route needs 32 contact hours of structured training but no prior ISO or AI experience. ISACA’s AAIA, AAISM and AAIR need an existing certification such as CISA, CISM or CRISC, and the AAIG needs CGEIT or six years of governance experience.
How Much Does an AI Governance Certification Cost?
Exam fees in October 2026: the AIGP costs $649 for IAPP members or $799 for non-members; ISACA’s AAIA, AAISM and AAIR cost $459 or $599, plus a $50 application fee for certification. Our ISO/IEC 42001 Lead Implementer course costs US$795 with the exam and two attempts included. Georgetown’s six-week certificate program costs $2,995.
Is the AIGP Accredited Under ISO/IEC 17024?
No. The IAPP lists its CIPM, CIPP/E, CIPP/US and CIPT credentials as accredited by ANAB under ISO/IEC 17024, and the AIGP is not on that list as of October 2026. Accreditation matters mainly where an employer, contract or regulator requires it, so check the requirement in writing before choosing on that basis.
Which AI Governance Certification Do US Employers Ask for Most?
Our Pay Index covers 179 US AI governance postings. The ISO/IEC 42001 standard was named in 71 (40%), CISSP in 48 (27%), CRISC and CISM in about 20% each, and the AIGP in 24 (13%). ISACA’s AI credentials appeared in three postings, and an ISO/IEC 42001 Lead Implementer or Lead Auditor credential by name in three.
