Artificial Intelligence Governance Professional - AIGP
AI and Data Foundations
Review the AI, machine learning, data, and generative AI concepts that appear across the exam.
Official Scope and Verification
This lesson is mapped to the verified Artificial Intelligence Governance Professional - AIGP outline. Official sources and public status were rechecked on 2026-07-13. Provider pages remain authoritative for late-breaking blueprint, availability, scheduling, price, language, delivery, and retake changes.
Current IAPP AIGP certification. IAPP AIGP Body of Knowledge v2.1, effective 2026-02-02, publishes question-count ranges, competencies, and performance indicators rather than scored percentages.
Official Objectives Emphasized Here
| Domain or objective area | Published weight | Key objective groups | Official source |
|---|---|---|---|
| Understanding the Foundations of Artificial Intelligence Governance | Published without a scored percentage | Understand what AI is and why it needs governance; Establish and communicate organizational expectations for AI governance; Establish policies and procedures to apply throughout the AI life cycle | IAPP official AIGP body of knowledge |
| Understanding How Laws, Standards and Frameworks Apply to AI | Published without a scored percentage | Understand how existing data privacy laws apply to AI; Understand how other types of existing laws apply to AI; Understand the main elements of AI-specific laws; Understand the main industry standards and tools that apply to AI | IAPP official AIGP body of knowledge |
| Understanding How to Govern AI Development | Published without a scored percentage | Govern the designing and building of the AI system; Govern the collection and use of data in training and testing the AI model and system; Govern the release, monitoring and maintenance of the AI system | IAPP official AIGP body of knowledge |
| Understanding How to Govern AI Deployment and Use | Published without a scored percentage | Evaluate key factors and risks relevant to the decision to deploy the AI system; Perform key activities to assess the AI system; Govern the deployment and use of the AI system | IAPP official AIGP body of knowledge |
Authoritative Sources for This Scope
- IAPP official AIGP body of knowledge - Official source; accessed 2026-07-13.
This module gives you the baseline AI and data language needed for Artificial Intelligence Governance Professional - AIGP. The goal is not to become a research scientist. The goal is to read an official learning or assessment scenario and know which concept is being tested.
Core Concepts To Know
- AI versus ML versus GenAI. AI is the broad goal of useful machine behavior. ML learns patterns from data. GenAI creates or transforms content such as text, code, images, audio, or structured summaries.
- Training versus inference. Training builds or adapts behavior from data. Inference uses a trained model to produce an output for a new input.
- Prediction versus generation. Prediction chooses a label, score, class, or forecast. Generation creates new content and must be checked for grounding, safety, and quality.
- Foundation model. A large pretrained model that can be adapted through prompting, retrieval, fine-tuning, tools, or workflow design.
- Embedding. A numeric representation of meaning that helps search, clustering, recommendations, semantic similarity, and RAG.
- Evaluation. The discipline of measuring whether outputs are correct, useful, safe, fair, and stable enough for the use case.
Data Foundations
Most AI failures start with data assumptions. For IAPP scenarios, ask where the data comes from, who is allowed to use it, whether it is current, whether labels are reliable, and whether sensitive information is protected.
| Data issue | Why it is tested | Self-learner check |
|---|---|---|
| Missing or stale data | The model may answer confidently from incomplete evidence. | Ask whether retrieval, refresh, or data validation is needed. |
| Biased or unrepresentative data | The output can treat groups or edge cases unfairly. | Look for fairness testing, representative samples, and human review. |
| Sensitive data | Prompts, files, logs, and model outputs can expose private or regulated information. | Apply classification, access control, encryption, masking, and retention limits. |
| Poor labels or definitions | A model cannot learn or evaluate a target that the organization has not defined clearly. | Define success metrics before choosing the model or tool. |
Model And Workflow Vocabulary
- Prompting: giving the model a task, context, constraints, examples, and desired output format.
- Grounding: connecting the model to trusted source material so outputs are tied to current facts.
- RAG: retrieving relevant content and passing it to the model at response time, often better than fine-tuning when source material changes frequently.
- Fine-tuning: adapting a model with training examples, useful for repeatable style or task behavior but not a replacement for current source retrieval.
- Agents: systems that plan or call tools to complete tasks; they need boundaries, permissions, logs, and fallback behavior.
- Human oversight: review by a person when the output affects safety, money, legal rights, employment, healthcare, education, or other high-impact decisions.
Provider-Specific Lens
For Artificial Intelligence Governance Professional - AIGP, tie every AI concept back to AI governance, privacy, risk, policy, and accountable deployment. A generic definition is useful only if you can apply it to a scenario from IAPP.
- AI system inventory
- risk assessment
- privacy impact analysis
- policy governance
- accountability mapping
- monitoring evidence
Track-Specific Vocabulary Priorities
- Read the exact credential title first. Many AI credentials are role-based, so the same AI concept can be tested differently for an engineer, architect, auditor, business leader, teacher, or administrator.
- Translate every objective into a real scenario with a user, data source, risk constraint, and expected output.
- Separate durable AI principles from provider product names so you can still reason when a product name changes.
- Use an AI system inventory, risk classification, control mapping, evidence collection, and monitoring plan.
- Connect AI risks to data protection, transparency, accountability, vendor management, incident response, and change control.
- Study NIST AI RMF and OWASP GenAI Security as general references, then map them to the credential provider objectives.
Example: RAG Or Fine-Tuning
Scenario: a support team needs answers from policy documents that change every month. The best first pattern is usually retrieval-grounded generation because the answer should come from current documents. Fine-tuning may help style or task behavior, but it does not automatically keep the model synchronized with the latest policy.
Common trap: choosing the more advanced-sounding option instead of the pattern that matches the data-change requirement.
Practice Routine
- Make flashcards for the vocabulary above, but put the definition on one side and a workplace example on the other.
- For every provider tool you study, write the AI concept it maps to: search, classification, generation, orchestration, monitoring, governance, or security.
- When you miss a question, classify the miss as vocabulary, data, model choice, security, or operations. Review the category, not just that one answer.
Useful Links
- IAPP AIGP - Official Artificial Intelligence Governance Professional page.
- IAPP AI Governance Resources - Official IAPP AI governance resource hub.
- NIST AI Risk Management Framework - General reference for trustworthy AI risk management.