- How the AICP Exam Is Structured
- What AICP Questions Actually Look Like
- Domain-by-Domain Breakdown and Weight
- The Open-Book Reality: What It Means in Practice
- 90 Minutes, 40 Questions: Making Every Second Count
- Registration, Fees, and Delivery Formats
- A Domain-Weighted Preparation Schedule
- Frequently Asked Questions
- The AICP exam is 40 multiple-choice questions in 90 minutes with a 65% passing score - know exactly what that means for pacing.
- Domain 2 (Articles 8, 9, and 10 of the EU AI Act) carries the highest weight at 25% - it demands deep legislative reading, not surface familiarity.
- The exam is open-book: the EU AI Act text is permitted, but speed-reading under pressure requires prior mapping of key articles.
- Training completion with Practical Assignments is a mandatory prerequisite - you cannot register through EXIN without it.
How the AICP Exam Is Structured
The Artificial Intelligence Compliance Professional (AICP) certification is administered by EXIN, the Examination Institute for Information Science, and sits on the EXIN Anywhere platform. Whether you take it remotely under live or video proctoring, or in person at an accredited partner site, the exam parameters are identical: 40 multiple-choice questions, a 90-minute time limit, and a passing threshold of 65% - meaning you need to answer at least 26 of 40 questions correctly to earn the certification.
What makes the AICP exam structurally distinct from older compliance certifications is its legislative specificity. This is not a broad-strokes information security exam repurposed for AI. Every question is anchored to a defined slice of the EU AI Act, ISO/IEC 42001, or the NIST AI Risk Management Framework, and the five exam domains are mapped directly to the lifecycle of AI compliance - from foundational law to implementation. That specificity is both the challenge and the opportunity: if you know the material cold, there are no trick questions, only applied knowledge tests.
What AICP Questions Actually Look Like
Multiple-Choice With Scenario Framing
Every AICP question follows the standard EXIN multiple-choice format: one stem (the question or scenario), four answer options, one correct answer. There are no multiple-select, drag-and-drop, or essay components. That simplicity, however, should not breed complacency. EXIN designs AICP items to test application, not recognition. A typical question might describe a fictional company deploying a high-risk AI system for credit scoring and ask which conformity assessment obligation under Article 9 applies - not what Article 9 says verbatim.
This means the most dangerous preparation mistake is reading the AI Act as a list of facts to memorize. You need to internalize the logic of the Act: why certain AI systems are classified as high-risk, what the risk management obligations cascade into, how transparency requirements differ across deployment contexts, and where human oversight mandates bite hardest.
Scenario Length and Cognitive Load
Scenario stems in the AICP exam tend to be moderately long - often two to four sentences setting up a compliance situation before the actual question. This means your reading pace directly affects your time budget. Candidates who have not done timed practice under realistic conditions frequently report that the 90 minutes felt shorter than expected. Using the AICP practice tests on this site under simulated time pressure is one of the most effective ways to calibrate that reading speed before exam day.
Question Format at a Glance
What you will face on every AICP exam question:
- One question stem (often a 2-4 sentence scenario)
- Four answer options (A, B, C, D)
- Single correct answer - no partial credit
- Applied knowledge emphasis, not pure recall
- Questions drawn from five weighted domains across the EU AI Act, ISO/IEC 42001, and NIST AI RMF
Domain-by-Domain Breakdown and Weight
Understanding which domains carry the most exam weight is not optional preparation intelligence - it is the foundation of an intelligent study plan. Here is what each domain actually demands from candidates.
Domain 1: General Understanding of the EU AI Act (20%)
This domain covers the foundational architecture of the EU AI Act: its scope, prohibited AI practices, the risk classification system (unacceptable, high-risk, limited risk, minimal risk), and the roles of providers, deployers, importers, and distributors. Candidates must understand why certain AI systems land in each risk tier and what regulatory obligations attach at each level.
- AI system definition under the Act
- Prohibited practices (Article 5)
- High-risk AI system classification (Annex III)
- Stakeholder roles and responsibilities
Domain 2: In-Depth Analysis of the AI Act - Articles 8, 9, and 10 (25%)
This is the heaviest domain and the one where open-book access to the AI Act text pays off most. Article 8 defines compliance requirements for high-risk AI systems. Article 9 specifies risk management system obligations. Article 10 covers data and data governance requirements. Questions here test whether candidates can distinguish between provider and deployer obligations and identify specific compliance gaps in described scenarios.
- Article 8: General obligations for high-risk AI providers
- Article 9: Risk management system components and lifecycle requirements
- Article 10: Training data quality, relevance, and bias mitigation
- Practical gap analysis between current practice and Act requirements
Domain 3: Building Trustworthy AI - Privacy, Transparency, and Data Governance (20%)
This domain integrates the AI Act with GDPR principles and ISO/IEC 42001 data governance obligations. Candidates must understand how transparency requirements (Article 13) interact with existing data protection law, and how data governance frameworks support trustworthy AI deployment. Familiarity with GDPR is listed as a recommended background for good reason - this domain assumes it.
- Transparency and information obligations (Article 13)
- GDPR intersection with AI data processing
- ISO/IEC 42001 data governance requirements
- Human oversight mechanisms (Article 14)
Domain 4: Ethical AI Frameworks and Human Rights (15%)
The lightest domain by weight, but do not dismiss it. Questions here cover fundamental rights impact assessments, bias and fairness concepts, and the ethical frameworks that underpin responsible AI development. The NIST AI RMF appears most prominently here, particularly its GOVERN and MAP functions.
- Fundamental rights impact assessments
- NIST AI RMF GOVERN and MAP functions
- Algorithmic fairness concepts
- Human rights due diligence in AI deployment
Domain 5: AI Compliance Lifecycle Management and Implementation (20%)
This domain tests whether candidates can operationalize what Domains 1-4 describe. It covers conformity assessments, CE marking processes for high-risk AI, post-market monitoring, incident reporting obligations, and how to embed compliance into an organization's AI development pipeline.
- Conformity assessment procedures
- CE marking obligations for high-risk AI
- Post-market monitoring and logging requirements
- Incident reporting and serious incident definitions
- Internal compliance governance structures
| Domain | Weight | Est. Questions | Core Frameworks |
|---|---|---|---|
| Domain 1: General EU AI Act | 20% | ~8 | EU AI Act (foundational) |
| Domain 2: Articles 8, 9, 10 | 25% | ~10 | EU AI Act (legislative) |
| Domain 3: Privacy & Transparency | 20% | ~8 | EU AI Act, GDPR, ISO/IEC 42001 |
| Domain 4: Ethics & Human Rights | 15% | ~6 | NIST AI RMF, ethical frameworks |
| Domain 5: Lifecycle & Implementation | 20% | ~8 | EU AI Act, ISO/IEC 42001 |
The Open-Book Reality: What It Means in Practice
The AICP exam permits candidates to reference the EU AI Act text during the exam. This is not the relief it might initially appear to be. With 40 questions to complete in 90 minutes, you have an average of 2 minutes and 15 seconds per question. Any time you spend flipping through the Act to find a provision you could have recalled from memory is time you cannot recover elsewhere.
Open-book access works best as a verification tool, not a primary lookup tool. The candidates who use it effectively have already internalized the structural logic of the Act - they know Articles 8, 9, and 10 live in Chapter III, that Annex III defines high-risk categories, that Article 5 covers prohibitions - and they use the text to confirm specific wording when a question hinges on precise language. Candidates who plan to "look everything up" during the exam routinely run out of time.
90 Minutes, 40 Questions: Making Every Second Count
A Question-by-Question Pacing Framework
The math is simple: 90 minutes divided by 40 questions gives you 135 seconds per question. In practice, you should target completing a first pass of all 40 questions within 70-75 minutes, leaving 15-20 minutes to review flagged items and consult the AI Act text on genuinely ambiguous questions.
On your first pass, move decisively. If you are confident in an answer, mark it and move on. If you are uncertain, flag the question, make a provisional selection (never leave an answer blank - there is no penalty for guessing), and continue. Spending five minutes on a single Domain 4 question about NIST AI RMF framing while Domain 2 scenario questions await is a poor allocation of your cognitive resources.
Where Candidates Lose Time
The two most common time traps in the AICP exam are over-reading scenarios and second-guessing Domain 2 questions. Scenario stems are designed to contain all the information you need and occasionally some information that is deliberately irrelevant - a classic EXIN technique. Train yourself to identify the compliance-relevant facts in a scenario quickly. Is the system high-risk? Is it a provider or deployer context? What lifecycle stage is described? Answering those three questions usually narrows your options to two, and then domain knowledge closes the gap.
For Domain 2 specifically, resist the urge to over-consult the Act on every Article 9 question. These questions test understanding of the risk management system's components and logic - they are rarely answered by finding a single sentence in the Act. Deep comprehension built during preparation counts more here than rapid reference during the exam.
Registration, Fees, and Delivery Formats
The AICP exam cannot be registered for independently in the way many ISACA or CompTIA exams can. Completion of accredited AICP training with Practical Assignments is a mandatory prerequisite. EXIN validates training completion before exam access is granted. This means your first step is always selecting an accredited training provider - a decision that also determines how exam access is bundled and at what cost.
Training and exam packages from accredited providers typically range from $800 to $1,700 depending on provider, delivery format, and included materials. The exam fee itself is generally included in the training package rather than billed separately. When comparing providers, confirm whether the package includes exam voucher, study materials, practice assessments, and what the resit policy looks like if needed. For a detailed comparison of accredited training options, see our guide on AICP Training Providers 2026: How to Choose Accredited Options.
Once training is complete, the exam is delivered through EXIN Anywhere - EXIN's remote proctoring platform - either via live proctor or video proctoring. Candidates preferring in-person testing can use accredited partner test centers. The exam is currently available in English, French, Dutch, and Portuguese. Importantly, the AICP certification is valid for life with no mandatory recertification, making the upfront investment particularly durable.
A Domain-Weighted Preparation Schedule
EXIN recommends approximately 112 total hours of preparation - 14 contact hours of training plus substantial self-study. How you structure that self-study time should reflect exam domain weights, your background, and the legislative density of each domain. The framework below assumes you have completed accredited training and are in the independent study phase.
Domain 1 Foundation + Domain 5 Context
- Read the EU AI Act in full once - structure over detail at this stage
- Map the risk classification system and Annex III high-risk categories
- Review AI compliance lifecycle stages to understand how Domain 5 operationalizes everything else
- Complete 20 practice questions across Domains 1 and 5
Domain 2 Deep Dive - Articles 8, 9, and 10
- Read Articles 8, 9, and 10 line-by-line with annotation
- Practice distinguishing provider vs. deployer obligations in scenarios
- Map Article 9 risk management components to real-world process steps
- Complete 30 Domain 2-focused practice questions - this is your highest-weight domain
Domain 3 + Domain 4 Integration
- Review GDPR data processing principles and map them to AI Act Article 13 transparency requirements
- Study ISO/IEC 42001 data governance obligations relevant to AI systems
- Work through NIST AI RMF GOVERN and MAP functions for Domain 4
- Complete mixed-domain practice sets including scenario-based questions
Full Exam Simulation + Open-Book Refinement
- Take two full 40-question timed practice exams - 90 minutes each
- Refine your AI Act article index based on where you lost time
- Review every incorrect answer against the relevant Act provision or framework
- Final targeted review of Domain 2 items below 70% accuracy
Throughout this schedule, use full-length AICP practice tests to simulate exam conditions rather than topic quizzes alone. Condition-specific practice - timed, 40 questions, mixed domains - is qualitatively different from domain-specific drilling and should constitute the majority of your final week. For additional guidance on structuring your training hours across providers, the article on AICP Training Providers 2026: How to Choose Accredited Options covers how different formats affect preparation pacing.
Key Takeaway
Domain 2 carries 25% of the exam - the largest single block. If your practice tests consistently show weakness in Articles 8, 9, and 10 scenarios, dedicate additional review time there before any other adjustment. One domain mastered deeply beats five domains understood superficially.
Frequently Asked Questions
No. EXIN requires proof of completed accredited AICP training, including Practical Assignments, before granting exam access. This is a hard prerequisite - not a recommendation. You must complete training through an EXIN-accredited provider before you can schedule your exam through EXIN Anywhere or an accredited test center.
The exam time limit is 90 minutes from the moment you begin. There are no section breaks or pauses. The clock runs continuously, so your pacing strategy - targeting a first pass within 70-75 minutes and reserving time for review - should be practiced before exam day, not improvised during it.
Domain 2 (Articles 8, 9, and 10 of the EU AI Act) at 25% weight is the highest-leverage focus. Combined with Domain 1 (20%), these two domains together account for nearly half the exam. If preparation time is genuinely constrained, thorough mastery of these two domains before lighter review of the others is the most defensible allocation.
The AICP certification is valid for life with no mandatory recertification requirement. This is notable for a regulation-anchored certification - EXIN has not attached a renewal cycle to the credential. However, as the EU AI Act enforcement timeline progresses through 2025-2027, staying current with regulatory developments is professionally important even if not formally required by EXIN.
Yes - the EU AI Act text is permitted during the exam. However, with 40 questions in 90 minutes, there is limited time to perform extensive document searches. The open-book access is most valuable for verifying specific article wording on high-stakes Domain 2 questions, not as a substitute for preparation. Candidates who rely heavily on lookup during the exam routinely run short on time. Build your article index in advance and use the Act text sparingly.
Ready to Start Practicing?
Test your knowledge across all five AICP exam domains with full-length, timed practice tests designed to mirror the EXIN exam format - 40 questions, scenario-based items, and domain weighting that matches the real thing.
Start Free Practice Test