Body of Knowledge and Exam Blueprint v2.1
How to study for the AIGP exam
Use the AIGP v2.1 blueprint to map your gaps, then work through governance foundations, law and frameworks, development, and deployment in that order. IAPP recommends planning for at least 30 hours. This 14-session plan ends with two rehearsals and a review of the facts that changed your answers.
How should you adapt the plan to your background?
If you come from engineering or product, you may already know how a model is developed and validated. Spend extra time translating that evidence into an ownership or release decision and identifying the applicable policy, law or framework. Practice explaining the decision to someone who did not run the tests.
If you come from policy, privacy or legal, you may be comfortable identifying which source applies. Spend extra time on how a team gathers evidence during development and after launch. Follow one system from design to monitoring and write down what you would ask the developer, vendor and deployment owner at each stage.
What should you do in each of the 14 sessions?
This TestCertify plan follows the kit’s sequence and can be used with free resources. Use IAPP’s blueprint, sample questions and your own retrieval prompts for the topic sessions. For the rehearsals, use fresh questions from any practice material you already have, or build two sets of closed-book prompts and treat the results as timing practice.
| Session | Focus | What to produce |
|---|---|---|
| 1 | Baseline | Try issuer samples and log weak objectives or terminology. |
| 2 | AI systems and impacts | Describe the purpose, affected people and potential effects of one system. |
| 3 | Roles and policy | Assign ownership, review and escalation for a lifecycle decision. |
| 4 | Privacy and data use | Map the data, purpose, actor and source you would check. |
| 5 | Existing legal categories | Compare how different legal questions can arise from the same use. |
| 6 | AI-specific applicability | Locate a provision and record the actor, jurisdiction, category and date. |
| 7 | Standards and frameworks | Use a framework to turn an identified risk into an action to review. |
| 8 | Design and intended purpose | Write the intended use and the assumptions your team needs to test. |
| 9 | Data and validation | Identify evidence you would ask for before relying on evaluation results. |
| 10 | Release decisions | Write a release recommendation and state what would change it. |
| 11 | Deployment selection | Compare two options against intended use and available evidence. |
| 12 | Vendor review and operation | List diligence questions, the monitoring owner and a fallback action. |
| 13 | First timed rehearsal | Complete two closed halves and label misses by cause and objective. |
| 14 | Fresh rehearsal and review | Try a different set after targeted review and update your readiness notes. |
How should you review a missed question?
Write the objective, the reason you picked the answer, the fact or source that should have changed your decision and a fresh example to try. Use categories such as term, role, rule or evidence. If a mistake came from applying a framework at the wrong stage, revisit that stage and explain what information you would have in hand at the time.
For date-sensitive study notes, record the document version and whether it is a statute, a regulator’s explanation or a voluntary framework. When you return to the note, check the original source for changes and correct the example before reusing it.
How should you set up the final two rehearsals?
Plan for two separate blocks and review only the current block before moving on. If you use a shorter set for timing practice, set the timer in proportion to the number of questions. Try an optional break during one rehearsal so you have a chance to decide whether it helps you concentrate on the second half.
Keep the second rehearsal fresh by changing the examples or using a separate question set. Compare the kinds of errors you made across both attempts. If you keep identifying the wrong role or lifecycle stage, work through one more example before trying to increase your pace.
What should you be able to do before the exam?
- Identify the owner, intended use, lifecycle stage and immediate decision in an unfamiliar AI scenario.
- Find the version or effective date of a relevant source and explain why the actor and jurisdiction matter.
- Name the evidence needed to support a release or deployment decision and what would trigger monitoring or review afterward.
- Finish a timed block with room to review the active questions, including selection counts, before closing the section.