Mar 24 / James Kavanagh

Prepare for and Pass the AIGP Exam in 21 days

A practical guide to achieving the IAPP AIGP Certification in 21 days using the AI Career Pro Exam Prep course, by precisely focusing on the 2026 IAPP Body of Knowledge v2.1.
You can confidently prepare for and pass the IAPP AI Governance Professional exam in 21 days with no prior experience or expertise.  You just have to prepare with precision and practice exam questions carefully. It's a foundational stepping stone and credential as a first step towards doing the real work of AI Governance in practice. 
You see, I've found in conversations with practitioners, that most AIGP candidates spend far longer preparing than the exam really demands. And the reason is usually the same: their prep materials over-index on Domain I - foundational concepts, technology, context, terminology, history - and they underweight Domains III and IV, which is where most of the marks sit. Domain I counts for only between 17% and 21% of the marks, and yet most preparation courses and guides spend as much as 50% of the course time on Domain I. Candidates also spend most of their study time watching videos and reading content, when the most important tip shared by successful candidates is to practice scenario questions and mock exams, and explicitly not try to learn deep technical or legal content.
After building a course that maps exactly to the IAPP Body of Knowledge v2.1, and now seeing the first candidates take and pass their exams with with this course, I'd like to share you something I think could be useful if you're considering the IAPP AIGP Certification: a day-by-day breakdown that covers all thirteen sub-domains in three weeks, with time built in for practice exams and even some rest days.
Honestly, this is completely achievable from a standing start, and entirely self-directed. Thirteen study days, 2 to 3 hours per day for thirteen sub-domains. Two rest days. Five practice exams. Then you sit the exam. You just have to be precise about what you learn and where you put your revision effort. I am confident this works, having seen candidates already progressing through our course sucessfully and passing. 

Day Zero: Enrol in the AI Career Pro AIGP Exam Preparation Course

This is the course I built to map precisely to the 2026 AIGP Body of Knowledge v2.1. It covers all 59 topics across 117 videos, with over 700 practice questions, five full practice exams, and 850+ prompt cards. Every lesson is available as video, text, and audio. I put it together because people learning the skills of AI Governance in our Practitioner Program wanted a rapid way to achieve AIGP Certification too, the credential to support their capability building. They gave me all the requirements, and I built it to spec. A fast, pragmatic course to achieve AIGP Certification, matching the BOK precisely with heavy emphasis on scenario questions and practice exams, nothing missed and no unnecessary content. 
If you want to try it before committing, Domain I-A and Practice Exam #1 are both free - just create an account and try it out.
If you want to try our AIGP Exam Preparation Course, look here.

Day Zero: Commit, Book Your Exam

Register for the exam before you begin studying. Not when you feel ready. A booked date changes how you approach the next three weeks.
The booking itself carries almost no risk. The AIGP exam is delivered through Pearson VUE, and the rescheduling policy is generous: in-person exams can be moved up to 48 hours before your appointment, and remote proctored exams up to 15 minutes after the scheduled start time. You can reschedule as many times as you need, provided you sit the exam within one year of purchase.
Book a date, start studying, adjust if life intervenes. To reschedule, go to the certifications section of your MyIAPP portal, click the green link on your exam to access Pearson VUE's scheduling platform, and follow the prompts. Full details at iapp.org/certify/faqs. Full details at iapp.org/certify/faqs.

Understanding the structure

The AIGP Body of Knowledge v2.1 has four major domains, each divided into parts, giving you thirteen sub-domains in total. The AI Career Pro course covers every one of them, mapped one-to-one. There's nothing in the course you don't need, and nothing missing that you do.
Ans so, the plan works like this: thirteen sub-domains across thirteen study days, two rest days, five full practice exam days, and exam day. That's your twenty-one days. Between two and three hours per day is all you need.
Here's how that works in practice. The Body of Knowledge v2.1 has 59 topics. Each topic has between one and four videos, and each video runs around five minutes. After every video there's a short quiz - a mix of knowledge and scenario-based questions - that takes a few minutes to complete. There are also reference materials and prompt cards for each topic if you want to reinforce or revisit anything. Everything in the course is mapped directly to what's examinable. We don't spend any time on material that isn't.
Now before we get into the day-by-day, it's worth understanding where the marks actually sit. The BoK v2.1 publishes the exam blueprint, which gives the minimum and maximum number of questions from each domain. Here's what that looks like:
  • Domain I. Understanding the foundations of AI governance: 16–20 questions (~21% of the exam) 
  • Domain II. Understanding how laws, standards and frameworks apply to AI: 19–23 questions (~25%) 
  • Domain III. Understanding how to govern AI development: 21–25 questions (~27%)
  • Domain IV. Understanding how to govern AI deployment and use: 21–25 questions (~27%) 
Domains III and IV together account for over half the exam. Domain I, which many study guides and courses treat as the centrepiece, accounts for roughly a fifth. This doesn't mean Domain I is unimportant. It's still got some foundational concepts for everything that follows, but it means you should move through it efficiently and invest more time in the domains that carry more weight. The study plan below reflects that.

Days 1–8: Foundations and Regulatory Landscape 

Day 1. Domain I-A: foundational AI concepts (4–6 questions on the exam) Start here and get moving. Domain I-A covers what AI is, the terminology, the types of AI, and why it needs governance. It's foundational, you need it, but with only 4–6 questions on the exam, it's not where you should be spending days. Cover the material, do the quizzes, move on.
Day 2. Domains I-B and I-C (5–7 and 6–8 questions) This is about establishing organisational expectations for AI governance: roles, responsibilities, cross-functional collaboration, and how governance approaches differ based on company size and context. Domain I-C covers the policies and procedures that apply across the AI lifecycle, including third-party risk. These two connect naturally, they're light content and 10 videos total, so they fit comfortably into a single day.
Day 3. Domain II-A: existing data privacy laws and AI (4–6 questions) Now you're into the regulatory content. This is about how existing privacy law, covering transparency, lawful basis, data minimisation, controller obligations, data subject rights, apply in AI contexts. If you have a privacy or legal background, parts of this will be very familiar. If you don't, focus on how these regulatory principles apply to AI rather than memorising every clause. The exam tests applied thinking, not recall.
Day 4. Domain II-B: other existing laws and AI (4–6 questions) This covers how intellectual property, non-discrimination, consumer protection, and product liability laws apply to AI. Training data rights, employment discrimination, unfair practices, design defects. There's enough distinct ground here to warrant its own day, especially if you're coming from a technical background.
Days 5-6. Domain II-C: AI-specific regulation (6–8 questions) This is the largest sub-domain in Domain II, and it's where you go beyond the course and read actual regulation. The risk classification framework, the requirements for high-risk systems, general-purpose AI model obligations, the enforcement framework, and the different requirements for providers, deployers, importers and distributors. The course flags the specific sections of the EU AI Act you should work through, and you should read them directly. Two days gives you time for both the course content and the primary source material. The BOK 2.1 introduces considerations of other international laws (including South Korea and US States as examples), but they're at a much lighter level than the EU AI Act.
Day 7. Domain II-D: industry standards and frameworks (3–5 questions) The OECD AI principles, the NIST AI Risk Management Framework and Playbook, and the core ISO AI standards inlcuding ISO 22989, ISO 42001, and ISO 42005. This is the smallest sub-domain by question count but it rounds out the regulatory and framework layer before you move into the applied domains in week two.
Day 8. Rest day. You've covered substantial ground now, all of Domain I and all of Domain II. Take the day off, revisit anything that didn't stick, or step away entirely. Don't skip this.

Days 9–15: Development, deployment, and use

This is the most important week. Domains III and IV together carry over half the exam, and the questions here are heavily scenario-based. You'll be given a situation, an AI system at a particular stage of development or deployment, and asked what the governance professional should do. Getting these right requires understanding the concepts, not just recognising terms.
Day 9. Domain III-A: governing the design and build of the AI system (6–8 questions) Defining the business context and use case, performing impact assessments, applying governance controls during design and build, identifying and managing risks, and documenting the process. Domain III sounds technical but it isn't, at least not in the engineering sense. It's about what governance looks like when AI systems are being designed and built.
Day 10. Domain III-B: governing data collection, training and testing (6–8 questions) Data governance requirements, data lineage and provenance, planning and performing training and testing, managing risks that emerge during that process, and documentation. This is where data quality, fit-for-purpose, and lawful rights to use data all sit.
Day 11. Domain III-C: governing release, monitoring and maintenance (8–10 questions) This is the largest sub-domain in Domain III. Release readiness and model cards, continuous monitoring, audits, red teaming, threat modelling, incident management, understanding why incidents arise, and transparency obligations. If you're going to give extra time to any single sub-domain in Domain III, this is the one.
Day 12. Domain IV-A: evaluating the decision to deploy (6–8 questions) Understanding the use case context, the differences between AI model types (classic vs. generative, proprietary vs. open source, small vs. large), and the differences in deployment options (cloud vs. on-premise vs. edge, using a model as-is vs. with fine-tuning, RAG, or agentic architectures). 
Day 13. Domain IV-B: assessing the AI system (5–7 questions) Performing or reviewing impact assessments on the selected system, evaluating vendor and licensing agreements, and understanding the specific risks and obligations when a company deploys its own proprietary model rather than a third-party one.
Day 14. Domain IV-C: governing deployment and use (9–11 questions) This is the single largest sub-domain on the entire exam. Applying governance policies to deployment, continuous monitoring, periodic assessment (audits, red teaming, threat modelling, security testing), incident documentation, forecasting secondary and unintended uses, external communications, and establishing controls to deactivate or localise an AI system when necessary. Give this day your full attention.
Day 15: Rest day.  Review weak areas, take a break, or both. Practice exams start tomorrow and you want a clear head for them.

Days 16–20 Five Full Practice Exams

The course includes five full practice exams. Do one per day, under timed conditions. Then review your results carefully.
If you score poorly on a first attempt, that's fine, that's what practice exams are for. The useful thing to do is look at which areas let you down and go back to those specific lessons. Every video in the course is around five minutes long. When you find a gap, you go directly to that lesson, watch it, complete the six embedded questions (three knowledge-based, three scenario-based), and move on. You're not re-doing the whole course, you're going to exactly the right place.
Across the full course, there are close to seven hundred questions beyond the practice exams. That's a significant amount of active practice built into the learning structure itself. Use it.
One thing the practice exams will sharpen: the real AIGP exam is heavily scenario-based and includes longer case studies with multiple questions. The practice exams all reflect that with over 250 scenarios and 20 full use cases (each with 5 questions). Being able to read a scenario carefully, identify what's actually being tested, and apply your knowledge appropriately is a skill in itself. The practice exams train you for that. Pay attention to how the questions are framed, not just whether you get the right answer.

Day 21 Exam Day

You've covered all thirteen sub-domains. You've sat five practice exams. You've worked through close to seven hundred questions. You know which domains carry the most weight. Sit the exam with the confidence that comes from actually having done the preparation.

A Few Additional Points

Every video in the course is manually captioned in English. I've personally reviewed and edited those captions, they're not auto-generated. For anyone studying in English as a second language, or who simply prefers to study with captions, that accuracy matters. The course also includes auto-translated captions in nine languages: Spanish, Portuguese, German, Italian, French, Hindi, Korean, Japanese, and Arabic. I did use AI for those, I don't speak all those languages but I hope it's helpful to have them.
There's also an audio-only version of every lesson for commutes, walks, or whenever video isn't practical. Each domain also has a single combined audio version so you can listen to an entire domain end-to-end in one sitting. We took care to make the audio high-quality so it's genuinely easy to listen to for revision, not something you have to endure.
These are the only two things I'd recommend reading outside the course. You don't need to memorise them, but it really helps to read them and get comfortable with their structure. The EU AI Act in particular comes up across multiple sub-domains, and if you've read the actual text, even once, you'll find the scenario-based questions much easier to navigate. The NIST AI Risk Management Framework is shorter and well-structured. Both are freely available. The course points you to the specific sections that matter, but sitting down with the primary documents is worth the time.

Going deeper: the AI Governance Practitioner Program

It's wonderful to learn beyond what's absolutely needed for the AIGP exam. In fact it's vital that you do. The certification covers the knowledge base, but AI governance as a practice is broader and deeper than any exam can assess. The only thing I'd encourage is honesty with yourself about what you're learning because you're curious and want to learn, versus what you need to learn to pass the exam. During these twenty-one days, stay focused on what's examinable. After the exam, go as wide and deep as you want.
The AIGP certification validates that you understand AI governance. If you want to go deeper into the foundations with case studies, or deeper into the practical application of how to create governance structures, design governance mechanisms, and build policies that actually work, with tools and templates to do so, then I encourage you to consider joining the AI Governance Practitioner Program. You learn the practice of real world Adaptive Governance. It's a natural complement to the certification: building your capability to do the work, beyond the credential.
The AIGP is achievable in twenty one days. What it requires isn't extraordinary effort. It requires focused effort in the right places. Follow the structure, take the rest days, do the practice exams seriously, and know where the marks actually are. Don't let anyone tell you it's more complicated or onerous than it is in reality. 
That's it. I wish you the best of luck.
The course includes five full practice exams. Do one per day, under timed conditions. Then review your results carefully.
If you want to build the kind of AI governance that works for real, covering both the theory and the practice, then the AI Governance Practitioner Program is for you.