If you're an eligible auditor (CISA, CIA, CPA, ACCA, ICAEW and others) and your goal is providing assurance over AI systems, the AAIA is the more targeted credential. If you want to advise on or run AI governance, or you aren't eligible for the AAIA, the AIGP is broader and more widely requested in governance roles. Many audit leaders eventually hold both: the AIGP for the governance framework and the AAIA for audit method.
Side by side
| AIGP (IAPP) | AAIA (ISACA) | |
|---|---|---|
| Focus | Governing AI across its lifecycle | Auditing and assuring AI |
| Eligibility | None | Active CISA or a recognised audit/accounting designation |
| Exam | 100 Qs, 2 h 45 min; pass 300 (100–500) | 90 Qs, 150 min; pass 450 (200–800) |
| Content | Foundations; laws, standards and frameworks; development; deployment | AI governance and risk (33%); AI operations (46%); auditing tools and techniques (21%) |
| Cost | $649 member / $799 non-member | $459 member / $599 non-member + $50 application |
| Maintenance | 20 CPE per 2 years + fee or IAPP membership | ISACA CPE policy |
| Legal depth | Higher (EU AI Act, other AI laws, privacy) | Moderate (regulation from an assurance view) |
Decision guide for auditors
| Your situation | Recommendation |
|---|---|
| IT auditor (CISA) auditing AI controls | AAIA first; add the AIGP for regulatory depth |
| Internal auditor (CIA) asked to audit AI governance | AAIA, or the AIGP if you'll also advise management |
| External auditor or advisory, building an AI assurance practice | AAIA + AIGP |
| Risk or compliance professional (not eligible for the AAIA) | AIGP |
| Moving from audit into an AI governance role | AIGP |
Study overlap
Both expect knowledge of the AI lifecycle, AI risks, and frameworks such as the NIST AI RMF and ISO/IEC 42001. If you take both, study the AIGP first for breadth, then the AAIA for audit technique, or the other way round if you're an experienced IT auditor.
See the AAIA exam guide, ISO/IEC 42001 Lead Auditor and the best AI governance certifications.
What each exam asks you to do
An AIGP-style question
A company is about to deploy a third-party AI hiring tool in the EU. Which step should the AI governance team take first? The answer involves classifying the system (high-risk under Annex III), confirming the company's role (deployer), and planning deployer duties and oversight. It's a governance design decision.
An AAIA-style question
An internal auditor is reviewing controls over a production credit-scoring model. Which evidence best shows that model drift is being managed? The answer involves monitoring reports, thresholds, documented responses to breaches and change records. It's an assurance-evidence decision.
Career paths that use each
| Path | Credential emphasis |
|---|---|
| IT audit → AI audit lead | AAIA, then AIGP for regulatory depth |
| Internal audit → head of AI assurance | AAIA + ISO/IEC 42001 Lead Auditor |
| Audit → AI governance (second line) | AIGP |
| Big Four advisory → AI assurance practice | AAIA + AIGP |
Preparing for both efficiently
- Shared foundation: the AI lifecycle, AI risks, the NIST AI RMF, ISO/IEC 42001 and EU AI Act basics. Study it once.
- AIGP-specific: deeper law (other AI-specific laws, privacy law applied to AI), impact assessments, deployment governance.
- AAIA-specific: audit planning, testing AI controls, evidence and reporting, and using AI tools in audit work.
Adding the governance view to your audit skills?
The AIGP Complete Pack includes a Cram Guide, 300 BoK v2.1 questions and an After You Pass guide.
Get the Complete Pack →Cost and maintenance side by side
| AIGP | ISACA AAIA | |
|---|---|---|
| Exam fee | $649 (IAPP member) / $799 (non-member) | $459 (ISACA member) / $599 (non-member) |
| Application fee | None | $50 |
| Prerequisite | None | An active CISA, CIA or a recognised accounting qualification, among others |
| Exam | 100 questions, 2h45, pass 300 (100–500 scale) | 90 questions, 150 minutes, pass 450 (200–800 scale) |
| Maintenance | 20 CPE per 2 years + $250 fee (included in IAPP membership) | ISACA CPE and annual maintenance fees; prerequisite credential must stay active |
Which first, by background
| You are... | Start with | Then consider |
|---|---|---|
| An IT auditor with a CISA | AAIA, which builds directly on your CISA | AIGP for the regulatory and governance side |
| An internal auditor with a CIA | AAIA if your audit plan includes AI systems | AIGP if you advise on AI governance design |
| A risk or compliance professional without an audit credential | AIGP (the AAIA requires a prerequisite) | ISO/IEC 42001 lead auditor training |
| A consultant offering AI assurance | Both, in the order that matches your clients' demand | ISO/IEC 42001 lead auditor if clients seek certification |
What an AI audit covers, and where each credential helps
- Governance: is there an AI policy, inventory, accountable owners and a risk process? (AIGP and AAIA both help.)
- Regulatory compliance: are EU AI Act classifications, deployer duties and GDPR assessments done correctly? (AIGP is stronger.)
- Lifecycle controls: data quality, testing, change management, monitoring. (AAIA is stronger on control testing.)
- Evidence and reporting: sampling, evidence quality, findings. (AAIA, building on CISA practice.)
- Third parties: vendor due diligence and contract terms for AI. (Both.)
An eight-week plan for a CISA holder doing both
- Weeks 1–3: AAIA. AI lifecycle fundamentals, then AI Operations (46% of the exam), then governance and audit techniques. Sit the exam.
- Weeks 4–8: AIGP. EU AI Act roles and tiers, NIST AI RMF, ISO/IEC 42001, then lifecycle scenarios. Much of the lifecycle content will already be familiar.
Frequently asked questions
Should auditors take the AIGP or the AAIA?
Eligible auditors focused on AI assurance should consider the AAIA. Those advising on or moving into AI governance, or not eligible for the AAIA, should consider the AIGP.
Can I take the AAIA without a CISA?
Yes, if you hold another recognised designation such as the CIA, a CPA, ACCA or ICAEW ACA with an IT audit or advisory focus.
Which is cheaper, the AIGP or the AAIA?
The AAIA's exam fee ($459–$599 plus $50) is lower than the AIGP's ($649–$799).
How much does the AAIA cost compared with the AIGP?
The AAIA costs $459 for ISACA members or $599 for non-members, plus a $50 application fee. The AIGP costs $649 for IAPP members or $799 for non-members, with no application fee.
What is the AAIA passing score?
450 on a scale of 200 to 800.
Sources
Last reviewed: October 2026.