Last updated:
AAIA preparation guide
AAIA vs AIGP: AI audit or AI governance?
Direct answer
AAIA and AIGP overlap on AI governance but serve different roles. AAIA, from ISACA, is for active CISA holders and listed audit and accounting designations in IT audit or advisory, and tests how an auditor evaluates AI systems. AIGP, from IAPP, lists no prerequisite credential on its exam page and centres on responsible AI governance and how laws and frameworks apply across the AI life cycle.
The formats differ too. ISACA Advanced in AI Audit (AAIA) is 90 questions in 150 minutes; IAPP lists the AI Governance Professional (AIGP) exam as 100 questions in 2.75 hours, with a 15-minute break.
CertArc is independent and not affiliated with ISACA or IAPP. For ISACA's other AI credentials, see CertArc's AAISM vs AAIA vs AAIR guide.
Start AAIA baselineAAIA and AIGP side by side (checked October 17, 2026)
| Topic | AAIA (ISACA) | AIGP (IAPP) |
|---|---|---|
| Prerequisite | Active CISA, or a listed designation held by someone in an IT audit or IT advisory role | None listed on IAPP's AIGP exam page |
| Exam | 90 multiple-choice questions, 150 minutes | 100 questions, 2.75 hours plus a 15-minute break |
| Exam fee | US$459 members, US$599 non-members, plus a US$50 application fee | US$649 members, US$799 non-members |
| Where | PSI test centres or remote proctoring; India, mainland China and Hong Kong are test-centre only | Pearson VUE test centres or online |
| Window | Sit within six months of registering | Take within one year of purchase |
| Keeping it | 10 AI CPE a year and 30 over three years; US$20 or US$35 a year; the qualifying credential stays active | Two-year term with 20 CE credits; maintenance fee covered by IAPP membership, otherwise US$250 at recertification |
| Focus | AI governance and risk, AI operations, AI auditing tools and techniques | AI foundations and impacts, laws and frameworks, AI life-cycle governance, emerging issues |
Original teaching example
A company uses a machine-learning model to screen job applicants. Its AI governance lead designs the impact assessment, the notice to applicants and the approval process. A year later the internal auditor is asked whether those controls work: were assessments done, does a person review rejected applications, and does the model inventory include the screening model?
AIGP puts more weight on the governance lead's design decisions, and AAIA on the auditor's evaluation of whether they operate. They overlap: AAIA's Domain 1 also covers AI governance, privacy and regulations. Pick the credential that matches the decisions you make most.
Issuer and audience
ISACA's AAIA is for IT auditors and advisors; IAPP's AIGP is for people who lead AI governance.
IAPP says AIGP demonstrates competency in AI development, ethical AI deployment and best practices in AI management. ISACA calls AAIA the world's first advanced AI audit certification, for IT auditors and advisors.
Prerequisites
AAIA needs a qualifying designation; AIGP lists none.
That opens AIGP to privacy, legal and policy professionals without an audit credential. AAIA is open only through CISA or ISACA's listed audit and accounting designations.
What each covers
Both cover AI governance and the AI life cycle; they differ in what they add.
AAIA adds AI Operations (46% of its exam) and audit tools and techniques: planning, sampling, evidence and reporting on AI. AIGP adds how current and emerging laws apply to AI systems, and debated issues in AI governance.
Choosing by role
Choose by the decisions you make at work.
If both describe your work, holding both is possible; they come from different bodies with separate renewals.
- IT auditor or advisor with CISA or a listed designation: AAIA.
- Privacy, legal or compliance lead running AI governance: AIGP.
- Auditor who also writes AI governance policy: either, or both.
Sources and fact check
Source checked: 2026-10-17
- Study methods and examples are independent CertArc teaching guidance. ISACA's pages are the authority for exam rules and fees, which can change.
- Practice results do not convert to an official score or guarantee a pass. CertArc is not affiliated with or endorsed by ISACA.
Frequently asked questions
Which is harder, AAIA or AIGP?
Neither body's pages publish data to compare difficulty.
Can I hold both AAIA and AIGP?
Yes. They are separate credentials from separate bodies, with separate renewals.
Which is better for IT auditors?
AAIA, if you hold CISA or a listed designation and audit AI systems. AIGP suits governance-led roles.
Do I need CISA for AIGP?
No. IAPP's AIGP exam page lists no prerequisite credential.
How long are the AAIA and AIGP exams?
AAIA is 90 questions in 150 minutes. AIGP is 100 questions in 2.75 hours plus a 15-minute break.
Does CertArc offer AIGP practice?
No. CertArc offers AAIA practice and is independent of ISACA and IAPP.
