Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
What it takes to earn PECB's ISO/IEC 42001 Lead Implementer credential as of October 2026: the six weighted exam domains, the 80-question open-book exam, the four credential levels and the AI project hours behind them, fees, continuing professional development (CPD) rules, and how it compares to the 42001 Lead Auditor, AIGP and AAISM. A reference guide for people who will build an AI management system.
PECB Certified ISO/IEC 42001 Lead Implementer is a personnel certification for planning, building and running an artificial intelligence management system (AIMS) to ISO/IEC 42001:2023, and for leading the team that does it.
ISO and IEC published ISO/IEC 42001 in December 2023 as a management system standard for AI. It sets requirements for organizations that provide or use AI-based products or services: an AI policy, AI risk assessment and treatment, AI system impact assessment, a Statement of Applicability for the Annex A controls, internal audit and management review. PECB, the Professional Evaluation and Certification Board, builds its exam around whether you can plan that system, put it in place and get the organization ready for a third-party certification audit. It is not a coding or data science exam.
Passing the exam makes you eligible to apply, and the level you receive depends on what you can document. PECB awards one of four levels (Provisional Implementer, Implementer, Lead Implementer or Senior Lead Implementer) based on your work experience and logged AIMS project hours. The scheme is run in compliance with ISO/IEC 17024, and UKAS lists this credential by name in its accreditation schedule for PECB. The credential is issued and maintained by PECB, whose ISO/IEC 42001 certification scheme had its first release in December 2024.
AI concepts, the EU's risk classification of AI systems and ISO/IEC 22989 terms. 21.25% of the exam.
Clauses 4 to 10 of ISO/IEC 42001 and the purpose of Annexes A to D. 6.25% of the exam.
Context, gap analysis, AI policy, AI risk assessment and the Statement of Applicability. The heaviest domain at 25%.
AI controls, documented information, awareness programs and AI operations. 22.5% of the exam.
Metrics, internal audit, management review and nonconformities. 12.5% of the exam.
Root causes, corrective action and the stage 1 and stage 2 certification audit. 12.5% of the exam.
Four things that set this credential apart from the other AI governance options, which mostly test what you know about AI policy, risk or security rather than how to build the management system itself.
This credential asks whether you can take an organization from a gap analysis to an AI management system that is ready for a third-party certification audit. PECB teaches it with its own IMS2 implementation methodology, and 48 of the 80 exam questions measure evaluation rather than recall. Planning and implementation alone make up 47.5% of the exam.
There is no prerequisite certification. PECB asks only for a general knowledge of AI management systems and ISO/IEC 42001 before the course. Your experience decides the level you're awarded after you pass, from Provisional Implementer up to Senior Lead Implementer.
ISO/IEC 42001 follows the same clause structure as other ISO management system standards, so the policy, risk assessment, Statement of Applicability, internal audit and management review will look familiar to an ISMS team. Our guide on choosing an AI governance certification covers how it fits next to the ISACA and IAPP options.
PECB is accredited under ISO/IEC 17024 by UKAS, IAS and COFRAC, and the UKAS schedule of accreditation for PECB (issue 7, August 27, 2026) lists the ISO/IEC 42001 Lead Implementer and Lead Auditor by name. PECB doesn't claim a DoD 8140 listing for this credential. Every accreditation it holds is on its accreditations page.
The exam also reaches past the standard. Domain 1 covers the EU's classification of AI systems by risk level and the AI terminology of ISO/IEC 22989, which helps when an AIMS has to sit alongside EU AI Act obligations.
The certification, the exam, and what it costs to earn and keep ISO 42001 Lead Implementer, as of October 2026.
Lead Implementer covers building the AIMS. If your work also takes in audit, policy or security, one of these covers the rest of the AI governance picture.
PECB's audit credential on the same standard. Same 80-question, three-hour, open-book format, but seven domains built on audit practice and 300 audit hours for the Lead level. A natural next step if you will audit an AIMS internally or for a certification body.
The IAPP AI Governance Professional comes at AI from the policy and law side, covering the EU AI Act, the NIST AI RMF and ISO/IEC 42001. It has no prerequisite and pairs well with an implementation role.
ISACA's Advanced in AI Security Management covers securing and governing AI at the program level. It requires an active CISM or CISSP and suits implementers who also own the security side of AI.
Lead Implementer doesn't require an earlier credential, but it helps to arrive with management system or AI project experience. The natural next steps branch into audit, policy or security.
Useful groundwork
The implementer credential
Two questions to answer before you commit: which level you'll qualify for, and whether you should pursue this credential at all. Here's a straight answer to both.
Aim for Lead Implementer.
With at least five years of professional experience, two of them in AI, and 300 logged hours of AIMS project activities, you can apply for Lead Implementer once you pass. Work that counts includes drafting an AIMS implementation plan, managing implementation projects, implementing corrective actions and monitoring AIMS performance. You'll also need two professional references.
Pass now, upgrade later.
You can still sit the exam. With no experience you'd receive Provisional Implementer, and with two years (one in AI) and 200 project hours you'd receive Implementer. As your experience grows, PECB lets you upgrade from your dashboard for a $100 application fee, and it decides at that point whether another exam is needed.
These are the roles PECB and the course audience point to. The credential fits people who build and run AI governance programs rather than people who build the models.
Owns the AIMS day to day: the AI policy, the roles and responsibilities around it, and the objectives the program measures itself against. Lead Implementer covers how to set that up and keep it improving.
Runs the implementation from the gap analysis through to the certification audit. PECB names professionals who oversee and manage AI projects as the first audience for this credential.
Advises clients on AI implementation strategy and on readiness for ISO/IEC 42001 certification. Consultants advising on AI implementation are part of PECB's stated audience for the course.
Makes sure AI projects meet the organization's AI requirements, runs the AI risk assessment, and tracks nonconformities to closure between audits.
Extends an existing ISO/IEC 27001 program to cover AI. The two standards share a management system structure, so much of the ISMS process carries over to an AIMS.
Product and data leaders who answer for how the organization develops and deploys AI. PECB lists executives and managers making decisions about AI implementation among its audience.
Two PECB credentials on the same standard, plus the two AI governance credentials people most often weigh against them. Here's how they line up.
| 42001 Lead Implementer | 42001 Lead Auditor | AIGP | AAISM | |
|---|---|---|---|---|
| Issuer | PECB | PECB | IAPP | ISACA |
| Focus | Building and running an AIMS | Auditing an AIMS | AI governance, law, lifecycle oversight | AI security management |
| Prerequisite to Sit | None | None | None | Active CISM or CISSP |
| Exam Format | 80 questions, 3 hours, open book | 80 questions, 3 hours, open book | 100 items, about 3 hrs | 90 questions, 2.5 hours |
| Passing Score | 70% | 70% | 300 (scaled 100 to 500) | 450 / 800 |
| Experience for Full Credential | 5 yrs (2 in AI), 300 project hours | 5 yrs (2 in AI), 300 audit hours | None | CISM or CISSP held first |
| Renewal | 90 CPD hours over 3 years | 90 CPD hours over 3 years | 20 CPEs over 2 years | 30 CPEs over 3 years |
| DoD 8140 Approved | Not claimed | Not claimed | No | No |
| Best For | People building the AIMS | Auditors assessing an AIMS | Privacy, compliance, legal and program leaders | Security managers and CISOs |
The two ISO/IEC 42001 credentials share an exam format, pass mark and maintenance rules but count different kinds of hours. AIGP and AAISM figures come from our guides to each, so check the IAPP and ISACA for current pricing before you register.
Certification Matchups: the published facts, strengths and weak spots of 33 certifications, side by side.
Our PECB-authorized boot camp covers all six exam domains in four days of live instruction, in person or online, with official PECB courseware, the exam and certification application fee, one free retake within 12 months, and 31 CPD credits included.
The standard itself, the frameworks around it, and how to choose among the AI governance credentials.
What ISO/IEC 42001 asks of an organization, from context and leadership to AI risk and impact assessment, and a phased way to build the AIMS from the gap analysis to certification readiness.
Where ISO/IEC 42001 sits next to the EU AI Act and the NIST AI RMF, and why it is the one of the three with a formal certification path.
Five questions to answer before you commit, from your regulatory context to the credentials your team already holds, and where ISO 42001 fits next to the ISACA and IAPP options.
The frameworks and accountability structures behind responsible AI, including the NIST AI RMF, the EU AI Act and ISO/IEC 42001 as the standard organizations can be audited against.
The implementer and auditor split explained on ISO/IEC 27001, including PECB's four credential tiers and why logged hours are the real gate. The same split applies to ISO/IEC 42001.
A rundown of the AI certifications on the market in 2026, who each one is built for, and how the governance credentials line up with the EU AI Act, NIST AI RMF and ISO 42001.
ISACA's three advanced AI credentials compared across security management, audit and risk. Useful if you are weighing an ISACA credential alongside ISO/IEC 42001.
PECB splits the ISO/IEC 42001 Lead Implementer exam into six competency domains, each with a published share of the 80 questions. Click any domain for what it covers.
The AI groundwork. What ISO does, how ISO/IEC 42001 relates to other ISO standards and regulatory frameworks, how AI developed, and how machine learning, deep learning and neural networks differ. It also covers what sets AI systems apart from other IT, the EU's classification of AI systems by risk level, and the terminology of ISO/IEC 22989. 17 of the 80 questions, all measuring comprehension.
The standard itself. The scope and structure of ISO management system standards, what an AIMS is for, the structure of ISO/IEC 42001 and the requirements in clauses 4 to 10, and the purpose of Annexes A, B, C and D. Only 5 questions, the smallest share of the exam, but every later domain leans on it.
The heaviest domain. Gathering what an implementation plan needs, analyzing the organization's internal and external context, setting AIMS objectives, and working out resources and the roles of interested parties. It also covers the AIMS project plan, the gap analysis, the AI policy, each step of the AI risk assessment and the Statement of Applicability. All 20 questions measure evaluation.
Domain 4 puts the plan into effect. It covers analyzing the AI systems and technologies the organization already uses, designing and implementing AI controls, defining and documenting the processes that run the AIMS, and managing documented information and records. It adds the communication strategy, AI training and awareness programs, managing AI operations including change management, and working with interested parties. All 18 questions measure evaluation.
This is where you prove the AIMS works, by monitoring and evaluating its effectiveness, measuring progress against AIMS objectives and metrics, setting up an internal audit program, and running management reviews at planned intervals. It also covers telling major from minor nonconformities and drafting a nonconformity report. 10 questions, all measuring comprehension.
Closing the loop and getting ready for the auditor. Root cause analysis and action plans for nonconformities, continual improvement processes, choosing a certification body, the stage 1 and stage 2 audit and its follow-up, and preparing staff for the ISO/IEC 42001 certification audit. All 10 questions measure evaluation.
Domains, question counts and weights reflect the PECB ISO/IEC 42001 Lead Implementer Candidate Handbook, version 1.5 (2026). PECB reviews its certification schemes on a regular cycle.
The questions candidates ask most often when researching the PECB Certified ISO/IEC 42001 Lead Implementer certification.
It is a PECB personnel certification for people who plan, build and run an artificial intelligence management system (AIMS) to ISO/IEC 42001:2023, the ISO and IEC standard for managing AI. The exam covers six domains, from AI concepts and the standard's requirements to implementation, monitoring and preparing for a certification audit. PECB runs the scheme in compliance with ISO/IEC 17024.
PECB aims it at people who oversee AI projects, consultants who advise on AI implementation, members of AIMS implementation teams, and managers who make decisions about AI and ISO/IEC 42001. It also suits information security managers whose remit now covers AI. It is not a data science or coding exam.
No. Anyone can sit the exam, and PECB only asks for a general knowledge of AI management systems and ISO/IEC 42001 before the course. Experience decides which credential you receive afterward. With no experience you get Provisional Implementer, and the Lead Implementer level needs five years of work experience (two in AI) and 300 hours of AIMS project activities.
As of October 2026, PECB lists the Lead exam at $1,000 and the certification application fee at $500 when you buy them without training. A course from a PECB partner includes the first exam attempt, one free retake, the application fee and the first year of the annual maintenance fee, as long as you finish within 12 months. After that, PECB charges $390 in annual maintenance fees per three-year cycle.
It is 80 multiple-choice questions in three hours, each with three answer options. Some questions stand alone and others come in sets of five built around a scenario. The exam is open book, so you can use a hard copy of ISO/IEC 42001, the course materials and your own notes. You need 70% to pass, and online results arrive instantly.
The domains are fundamental principles and concepts of an AIMS (21.25%), AIMS requirements (6.25%), planning an AIMS implementation (25%), implementing an AIMS (22.5%), monitoring and measurement (12.5%), and continual improvement and preparation for the certification audit (12.5%). Planning is the heaviest domain, with 20 of the 80 questions.
There are four. Provisional Implementer needs no experience at all. For Implementer, PECB wants two years of experience (one in AI) and 200 project hours. Lead Implementer raises that to five years (two in AI) and 300 hours, and Senior Lead Implementer to ten years (seven in AI) and 1,000 hours. Every level requires signing the PECB Code of Ethics, and each application needs two professional references.
PECB certifications are valid for three years. To renew, a Lead Implementer reports 90 CPD hours over the cycle, pays $390 in annual maintenance fees per three-year cycle and follows the PECB Code of Ethics. The hours don't have to be spread evenly across the years. Missing them leads to a 12-month suspension, and revocation if they are still outstanding after it.
PECB is accredited under ISO/IEC 17024 by UKAS, IAS and COFRAC. The UKAS schedule of accreditation for PECB (issue 7, August 27, 2026) lists the PECB Certified ISO/IEC 42001 Lead Implementer by name. PECB doesn't claim a DoD 8140 listing for this credential.
Both are PECB credentials on ISO/IEC 42001 with an 80-question, three-hour, open-book exam and a 70% pass mark. Lead Implementer builds and runs the AIMS across six exam domains. Lead Auditor checks one against the standard across seven domains, and its Lead level counts 300 audit hours instead of project hours.
ISO/IEC 42001 Lead Implementer is about building a management system to one standard that organizations can be certified against. AIGP from the IAPP covers AI governance from the policy, privacy and law side, with no prerequisite. AAISM from ISACA is a security management credential that requires an active CISM or CISSP. If your role spans policy or security as well as implementation, one of those can sit alongside the 42001 credential.
It makes the most sense if your organization is building an AIMS or plans to certify against ISO/IEC 42001, or if you advise clients who are. The credential is tied to a single standard, so it is a weaker fit if your work is AI law and policy, auditing, or hands-on model security. In those cases AIGP, the 42001 Lead Auditor or a technical AI course fits better.
Whether you're weighing the certification, working out funding, or planning training for a team, tell us where you are and we'll help you map out the right path.