Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
A reference guide to EC-Council's responsible AI governance certification as it stands in October 2026: the five exam domains, the 612-51 exam, both eligibility routes, cost, renewal, the jobs it fits, and how CRAGE compares to AIGP, AAISM and CRISC. Written for anyone weighing CRAGE or trying to work out what it actually tests.
CRAGE is EC-Council's responsible AI governance certification, launched on February 10, 2026 as part of the company's Enterprise AI Credential Suite.
It tests the work of governing AI once someone else has built it. That means setting strategy and policy, meeting regulatory obligations, assessing AI and vendor risk, putting security and privacy controls around models, and proving all of it to an auditor. The exam is 612-51, with 100 multiple choice questions in three hours, written against the CRAGE Exam Blueprint v1.
EC-Council aligns the program with the NIST AI Risk Management Framework and ISO/IEC 42001, and the official course also covers the EU AI Act, GDPR and CCPA, and SOC 2 Type II. To sit the exam you need two years of information security experience or official EC-Council training. CRAGE is issued and maintained by EC-Council, the body behind the Certified Ethical Hacker program.
How AI systems are built and run, and ethics at each lifecycle stage. 17% of the exam.
Strategy, governance frameworks, and AI law and regulation. Second heaviest at 24%.
AI risk assessment, threats, and third-party and supply chain risk. 16% of the exam.
Asset management, security architecture, and privacy and safety controls. The heaviest domain at 27%.
Incident response, continuity, and AI assurance, testing and audit. 16% of the exam.
Four things that set CRAGE apart from the other AI governance and AI security credentials on offer in 2026.
EC-Council's certification page states that CRAGE is not a model-building certification. It's aimed at the people who have to make AI defensible and compliant, and the blueprint shows it. Policy, regulation, vendor risk, controls and audit fill the 100 questions, with only one 9% sub-domain on AI fundamentals.
Domain 4 is the heaviest at 27%, and a third of it is AI security architecture: access control, encryption, API protection, model security and security testing. AIGP's four domains don't treat that as a topic of its own, which is why CRAGE suits GRC people who work next to the security team.
AAISM needs an active CISM or CISSP before you can earn it. CRAGE asks for two years of information security work or official training. Our guide on how to pick an AI governance certification walks through which entry point fits.
EC-Council launched CRAGE on February 10, 2026 alongside Artificial Intelligence Essentials (AIE), Certified AI Program Manager (CAIPM) and Certified Offensive AI Security Professional (COASP). The suite sits on EC-Council's Adopt, Defend, Govern (ADG) framework, and CRAGE is the credential aligned with the Govern pillar.
The four split by job. AIE is baseline AI fluency, CAIPM is about delivering AI programs, COASP tests AI systems from the attacker's side, and CRAGE handles oversight. EC-Council's launch announcement lays out the full suite.
The certification, the 612-51 exam, and what it takes to keep CRAGE active, as EC-Council publishes them in October 2026.
CRAGE covers AI governance end to end at a working level, so the next move depends on which part of the job grows: AI law, AI audit, or enterprise risk. Each of the three below has its own entry rules.
IAPP's Artificial Intelligence Governance Professional gives a full domain to how privacy, IP, consumer protection and AI-specific laws like the EU AI Act apply to AI. It has no prerequisites, so it's an easy add for CRAGE holders who end up working with legal and privacy teams.
ISACA's Advanced in AI Audit is built entirely around assuring AI systems, from AI operations to audit tools and techniques. CRAGE gives assurance and auditing one 8% sub-domain. AAIA requires an active CISA, CIA or CPA, so it suits CRAGE holders already on the audit track.
ISACA's Certified in Risk and Information Systems Control covers IT and enterprise risk well beyond AI: governance, risk assessment, risk response and reporting. It requires three years of risk experience across at least two of its four domains.
CRAGE sits in the middle of an AI governance track. Below it are the security and privacy fundamentals that build the background it assumes. Above it, the track branches into AI law, AI audit and security leadership, and enterprise risk.
Build the background
Govern AI end to end
Two questions to answer before you commit: can you sit the exam, and should you pick CRAGE over the other AI governance options. Here's a straight answer to both.
You can sit the exam after training.
Finish official EC-Council training at an Accredited Training Center, through EC-Council's iClass platform or at an approved academic institution, and you're eligible to attempt exam 612-51. The $100 application fee still applies, but EC-Council builds it into the training fee, and your details are collected through the training feedback form instead of a separate application.
You can apply and self-study.
Without training, you need two years of work experience in the information security domain, verified through EC-Council's eligibility application with a $100 non-refundable fee. Processing usually takes 5 to 10 working days once your verifiers respond, and an approved application stays valid for three months while you buy the $450 exam voucher.
EC-Council lists AI governance, compliance, risk, privacy and audit roles as the jobs CRAGE prepares you for. These six come from that list, each tied to the blueprint domain that covers the work.
Runs the AI governance program day to day: the policy set, the AI inventory, decision rights, and the operating model that says who signs off on a new use case. Domain 2 of the CRAGE blueprint is built around this job.
Assesses AI-specific risk, from model and data risk to adversarial attacks, keeps the AI risk register current, and reports exposure to leadership. Expect vendors to take as much time as your own models, since half of Domain 3 is third-party and supply chain risk.
Tracks which regulations apply to each AI system, such as the EU AI Act, GDPR and CCPA, and keeps the evidence that the organization meets them. The CRAGE compliance and legal sub-domain covers accountability, liability and industry-specific rules.
Tests whether AI systems and their controls work as documented, gathers audit evidence, and reports findings for remediation. The assurance, testing, auditing and validation sub-domain in Domain 5 is written for this seat.
Extends the privacy program to cover AI: data minimization, anonymization, and the transparency people are owed when a model makes decisions about them. EC-Council names privacy leaders and data protection officers as core CRAGE candidates.
Keeps model documentation, versioning and data lineage in order from development through retirement, so the organization can show what each model is and where its data came from. The AI Lifecycle and Asset Management sub-domain, 9% of the exam, describes this job almost line for line.
Two are AI governance and AI security credentials, and one is the long-running risk credential many GRC teams already hold. Here's how they line up as of October 2026.
| CRAGE | AIGP | AAISM | CRISC | |
|---|---|---|---|---|
| Issuer | EC-Council | IAPP | ISACA | ISACA |
| Focus | Responsible AI governance, risk and audit | AI governance, law, lifecycle oversight | AI security management | IT and enterprise risk, controls |
| Prerequisites | 2 yrs InfoSec or official training | None | Active CISM or CISSP | 3 yrs across 2+ domains |
| Exam Format | 100 questions, 3 hours | 100 items, about 3 hrs, linear | 90 questions, 2.5 hours | 150 questions, 4 hours |
| Passing Score | Form-based, 60 to 85% | 300 (scaled 100 to 500) | 450 / 800 | 450 / 800 |
| Exam Cost | $450 voucher | $649 member / $799 non-member | $459 member / $599 non-member | $575 member / $760 non-member |
| Renewal | 120 ECEs over 3 years + $80 annual fee | 20 CPEs over 2 years | 30 CPEs over 3 years | 120 CPEs over 3 years |
| Best For | GRC, privacy, compliance and audit leads governing AI | Privacy, compliance, risk, legal, program leaders | Security managers and CISOs | IT risk managers, GRC and controls professionals |
IAPP and ISACA prices vary by membership status, and CRAGE self-study candidates add the $100 application fee. AIGP, AAISM and CRISC details come from our guides to AIGP, AAISM and CRISC.
Certification Matchups: the published facts, strengths and weak spots of 33 certifications, side by side.
Our EC-Council CRAGE boot camp covers all 11 official modules in three days of live, instructor-led training, in person or online. Enrollment includes EC-Council's official courseware and digital lab manual, the exam voucher, a mobile study app, practice questions and a free retake if you need one. Because it's official training, the EC-Council application fee is covered too.
How EC-Council's AI suite fits together, how to choose between AI governance credentials, and the frameworks CRAGE is mapped to.
EC-Council released four AI certifications at once in February 2026. What AIE, CAIPM, COASP and CRAGE each validate, which job each one is written for, and where CRAGE lands against the rest of the governance field.
The questions to answer before you commit to an AI governance credential, now that ISACA's AAIR has launched, ISO 42001 shows up in vendor questionnaires and AIGP keeps building on the policy side.
A cert-by-cert rundown of the AI credentials employers ask about in 2026, with the plain facts on each and where it wins or loses against the alternatives.
The same three frameworks CRAGE is aligned with, traced through the four domains of the IAPP AIGP Body of Knowledge v2.1.
ISACA split AI into three specialty credentials that bolt onto existing certifications. How security leaders, auditors, and risk professionals each pick their lane.
ISACA's AI risk credential for experienced risk professionals, with CRISC as the main prerequisite path. Who it fits and what it adds for people who now own AI exposure.
The processes, standards and guardrails organizations use to keep AI systems safe, ethical and doing what they were deployed to do, and why the work now lands on IT, security, compliance and risk teams.
The CRAGE Exam Blueprint v1 splits exam 612-51 into five domains and 12 weighted sub-domains. Click any domain for what it covers.
Two sub-domains: AI Fundamentals and Technology Ecosystem (9%) and AI Ethics, Principles, and Responsible AI (8%). How AI systems are built, deployed and run, plus organizational readiness, then ethics at every lifecycle stage from problem definition and data collection through monitoring and responsible retirement, including international AI ethics guidelines and the ethical principles of the DoD AI Strategy.
Three sub-domains at 8% each: AI Strategic Planning and Organizational Alignment, AI Governance and Frameworks, and AI Compliance, Legal Frameworks, and Regulatory Requirements. Strategy and policy, governance structures and stakeholder management, governance of development, deployment and model updates, and the regulatory side: accountability, liability, rights, industry-specific compliance and legal risk.
Two sub-domains at 8% each: AI Risk Assessment and Threat Management, and Third-Party AI Risk Management and Supply Chain Security. Risk frameworks, threat and vulnerability identification and risk reporting, then the vendor side: supplier due diligence, dataset and algorithm provenance, AI vendor regulatory requirements, contracts that assign liability, and procurement checklists.
The heaviest domain, with three sub-domains at 9% each: AI Lifecycle and Asset Management, AI Security Architecture and Design Controls, and Privacy, Trust, Safety, and Ethical Controls. Data governance, lineage and model documentation, security architecture, access control, encryption, API protection and security testing, and the privacy, anonymization and trust controls that sit around a model.
Two sub-domains at 8% each: Incident Response and Business Continuity Planning, and AI Assurance, Testing, Auditing, and Validation. Running an AI incident from detection to post-incident review, continuity and disaster recovery planning, then security, privacy and fairness testing, model validation, audit evidence, and reporting and remediation.
Domains and weights reflect the EC-Council CRAGE Exam Blueprint v1 for exam 612-51. EC-Council publishes a weight for each sub-domain, and the domain totals shown here add those up. The official course teaches the same material in 11 modules.
The questions candidates ask most often when researching the Certified Responsible AI Governance & Ethics certification.
CRAGE is EC-Council's Certified Responsible AI Governance and Ethics certification. It tests whether you can govern AI systems across their life cycle, from policy and oversight to controls, compliance and assurance, and EC-Council aligns it with the NIST AI Risk Management Framework and ISO/IEC 42001. EC-Council states plainly that it is not a model-building certification.
EC-Council writes it for the people who answer for how AI gets used: GRC and risk managers, compliance and regulatory leads, chief privacy officers and data protection officers, data governance managers, and internal and technology audit managers. You don't need a technical AI background. If you build models or test them offensively, another credential fits better.
Exam 612-51 has 100 multiple choice questions and a three-hour time limit. It is closed book and delivered online through the ECC Exam Center with remote proctoring, and EC-Council asks you to book a session at least three days ahead. Questions follow the CRAGE Exam Blueprint v1, where each percentage point of weight equals one question.
There is no single fixed number. EC-Council delivers the exam in multiple forms and sets a cut score for each form based on its difficulty, so the passing mark ranges from 60 to 85 percent depending on the form you get. Some course listings quote 70 to 80 percent, but the certification site's published policy is the 60 to 85 percent range.
EC-Council's certification site lists CRAGE as a beta exam, with an Apply for Beta Exam option, as of October 2026. EC-Council has not published a date for the beta to end. Confirm the current status with EC-Council when you apply.
If you skip training, you need two years of work experience in information security, proven through EC-Council's eligibility application with a $100 non-refundable fee. If you complete official EC-Council training at an accredited training center, through iClass or at an approved academic institution, you're eligible to sit the exam, and the $100 fee is built into the training price.
EC-Council says processing usually takes 5 to 10 working days once the verifiers you list respond. An approved application is valid for three months, and in that window you buy your exam voucher from the EC-Council store or an authorized training partner. The voucher itself is valid for one year.
Under Exam Blueprint v1 they are AI Technology Ecosystem and Ethical Considerations at 17 percent, AI Strategy and Governance at 24 percent, AI Risk Management at 16 percent, Development and Implementation Governance at 27 percent, and Operations and Audit Governance at 16 percent. EC-Council weights 12 sub-domains individually, and these domain totals add them up.
As of October 2026, EC-Council lists the CRAGE exam voucher at $450. Self-study candidates add the $100 application fee, and EC-Council sells the official eCourseware for $250 on its own or $550 bundled with a voucher. Authorized training partners often bundle the voucher into the course price. Once certified, you pay an $80 annual continuing education fee.
CRAGE is part of EC-Council's continuing education scheme. You earn 120 ECE credits in each three-year cycle and pay the $80 annual continuing education fee, $240 per cycle. Credits come from IT security activities such as conferences, training, reading, writing research papers and preparing classes as an instructor.
Both are AI governance credentials. AIGP from IAPP grew out of the privacy world, has no prerequisites, and gives a full domain to how laws and standards such as the EU AI Act apply to AI. CRAGE asks for two years of information security experience or official training and spends more of its exam on security architecture, vendor risk, incident response and audit. Privacy and legal teams tend to lean toward AIGP. GRC teams that sit close to security tend to lean toward CRAGE.
AAISM from ISACA is an advanced credential for security leaders. You need an active CISM or CISSP to earn it, and its exam centers on running AI security inside a security program. CRAGE has a lower entry bar, two years of information security experience or official training, and is written for the governance, compliance, privacy and audit people who own AI oversight alongside the security team.
For GRC, compliance, privacy and audit professionals who've been handed AI oversight, it's a reasonable pick. The blueprint maps to NIST AI RMF and ISO/IEC 42001, the entry bar is two years of security experience, and renewal runs on the same ECE cycle as other EC-Council credentials. The trade-off is age. CRAGE launched in February 2026, so it has a much shorter track record with employers than AIGP, first administered in 2024, or CRISC.
Tell us where you are with CRAGE, from weighing the certification to planning AI governance training for a team, and we'll help you map out the right path.