- What "Open Book" Actually Means for the AICP Exam
- What You Are Permitted to Bring
- What Is Not Permitted
- How to Use the EU AI Act Text Strategically During the Exam
- Which Domains Benefit Most from Open-Book Access
- Building a Usable Reference: Annotation Before Exam Day
- The Time Reality: 90 Minutes, 40 Questions, One Document
- A Focused Preparation Calendar
- Frequently Asked Questions
- The AICP exam is officially open book - the EU AI Act text is the one permitted reference document during the 40-question test.
- EXIN administers the exam via the EXIN Anywhere platform, which means your reference must work within a proctored digital environment.
- A passing score is 65% on 40 multiple-choice questions within a 90-minute window - time management with an open reference is a skill in itself.
- Domains 2 (Articles 8, 9, and 10) and 3 (Privacy, Transparency, Data Governance) are most directly supported by having the AI Act text on hand.
What "Open Book" Actually Means for the AICP Exam
The Artificial Intelligence Compliance Professional (AICP) certification, administered by EXIN, includes a feature that surprises many first-time candidates: the exam is open book. Specifically, you are permitted to consult the EU AI Act text during your 90-minute, 40-question exam session. This is not a loophole or an informal arrangement - it is an explicit design decision baked into the current 2025 exam literature.
Understanding why EXIN made this choice clarifies what the exam is actually testing. The AICP is not a memorization credential. It exists to certify that professionals can apply regulatory frameworks to real-world AI systems, interpret specific articles and annexes, and make compliance judgments in ambiguous situations. These are precisely the skills organizations need as EU AI Act enforcement timelines run from 2025 through 2027. A candidate who can navigate the Act under time pressure and reason about its requirements is far more valuable than one who simply memorized article numbers.
This design also aligns with how compliance professionals actually work. In practice, an AICP-certified professional will have the regulation available when advising a development team. The exam simulates that reality. If you are still building your foundational knowledge, reviewing the AICP practice test environment will show you the type of scenario-based reasoning the exam demands.
What You Are Permitted to Bring
The permitted reference material is straightforward: the full text of the EU AI Act. This is the official legislative document that forms the backbone of the AICP certification's 2025 exam literature. Here is what matters practically:
- Digital copy: Because EXIN Anywhere is a live or video-proctored online platform, your reference will be a digital document open on your device alongside the exam interface.
- Annotated copy: You may annotate your version of the EU AI Act prior to exam day. Highlights, bookmarks, margin notes, and tabs are all legitimate preparation tools.
- Official EXIN exam literature: The exam is explicitly based on the 2025 exam literature package that EXIN and accredited training providers supply. Your training materials may include a formatted version of the Act that is easier to navigate than a raw legislative PDF.
- On-site option: If you sit the exam at an accredited partner testing center, physical printed copies of the EU AI Act text may be permitted per that center's protocols. Confirm directly with your provider.
Because the exam fee is typically bundled with accredited training - and because accredited training is a mandatory prerequisite - you should receive guidance on the permitted reference during your course. If your training provider does not address this, ask before exam day.
What Is Not Permitted
Open book does not mean open internet, and it does not mean unlimited reference materials. The EXIN Anywhere proctoring environment monitors your session for browser switching, unauthorized applications, and secondary devices. Candidates should be clear on these boundaries:
- No supplementary standards documents unless explicitly permitted - ISO/IEC 42001 and the NIST AI RMF, both of which appear in AICP training content, are not automatically open-book references during the exam.
- No external websites, search engines, or AI tools. The proctor monitors for tab switching and navigation away from the exam and your single permitted reference.
- No communication with other individuals, whether via messaging, phone, or any other method.
- No additional notes documents beyond annotations within the permitted reference text itself, unless your provider has confirmed otherwise.
This means the exam places a premium on your knowledge of ISO/IEC 42001 and NIST AI RMF from memory, since you have studied them in depth during your accredited training but cannot look them up in real time. Candidates who underestimate this are often caught off guard by questions in Domain 5 (AI Compliance Lifecycle Management and Implementation) that require reasoning about framework integration without a reference document in hand.
How to Use the EU AI Act Text Strategically During the Exam
The candidates who use the open-book policy most effectively are not the ones who read the AI Act for the first time on exam day. They are the ones who have already internalized the structure of the Act and use the document only to verify specific details, article numbers, or annex classifications under time pressure.
Know the Architecture Before You Walk In
The EU AI Act is a long, structured document. Its most exam-relevant sections include:
- Title I and II: Scope, definitions, and prohibited practices - foundational for Domain 1 questions.
- Title III (especially Articles 8, 9, and 10): Requirements for high-risk AI systems - the entire focus of Domain 2, which carries the highest weighting at 25%.
- Annexes I and III: Lists of high-risk AI application areas. Candidates must be able to locate these quickly.
- Title IV: Transparency obligations - relevant to Domain 3.
- Title IX: Codes of conduct and Article 69 provisions - relevant to Domain 4.
Build a Lookup Index
Before exam day, create a personal index or bookmark set organized by topic: risk classification, conformity assessment, data governance obligations, transparency requirements, and so on. During the exam, you are not reading - you are confirming. The difference is 30 seconds versus 3 minutes per question.
Key Takeaway
Treat your annotated EU AI Act copy as a precision instrument, not a safety net. Candidates who open the document to figure out an answer from scratch will run out of time. Use it only to verify what you already understand.
Which Domains Benefit Most from Open-Book Access
The five AICP exam domains are not equally served by the open-book policy. Understanding this asymmetry shapes how you allocate preparation time.
Domain 2: In-Depth Analysis of Articles 8, 9, and 10 (25% of Exam)
This is the domain most directly supported by the open-book policy. Article 8 covers compliance with requirements, Article 9 covers risk management systems, and Article 10 covers data and data governance for high-risk AI. These articles are dense with specific procedural requirements.
- Bookmark Article 9's iterative risk management cycle provisions
- Know Article 10's data quality criteria in detail - questions may ask you to identify which criterion applies to a given scenario
- Article 8's cross-referencing structure rewards candidates who understand how it links to the annexes
Domain 1: General Understanding of the EU AI Act (20% of Exam)
Foundational knowledge of scope, definitions, and prohibited AI practices. The open-book reference helps with edge cases - borderline definitions, exact prohibition language - but strong candidates know this material cold.
- Focus on the definitions article and Annex III classification lists
- Prohibited AI practices under Title II are frequently tested with scenario-based questions
Domain 3: Building Trustworthy AI - Privacy, Transparency, and Data Governance (20% of Exam)
Draws heavily on the Act's transparency title and overlaps with GDPR principles. Your reference supports article-specific transparency requirements, but GDPR and ISO 27001 familiarity must come from your training.
- Title IV transparency obligations are bookmarkable and testable
- Data governance questions may connect Article 10 back to GDPR concepts - a recommended background per AICP prerequisites
Domain 4: Ethical AI Frameworks and Human Rights (15% of Exam)
This domain draws on international frameworks, UNESCO recommendations, and ECHR principles that are not in the EU AI Act text. The open-book policy provides minimal direct support here.
- Ethical frameworks must be studied from memory - your reference document will not save you in this domain
- Article 69 codes of conduct provisions are the main AI Act hook
Domain 5: AI Compliance Lifecycle Management and Implementation (20% of Exam)
Integrates ISO/IEC 42001 and NIST AI RMF alongside the EU AI Act. Since only the Act is an open-book reference, the framework integration content must be mastered through study.
- Know the ISO/IEC 42001 AI management system structure from memory
- NIST AI RMF's four core functions (Map, Measure, Manage, Govern) should be internalized, not looked up
| Domain | Exam Weight | Open-Book Utility | Must-Know from Memory |
|---|---|---|---|
| Domain 1: General EU AI Act Understanding | 20% | Moderate - edge case definitions | Scope, prohibited practices, classification logic |
| Domain 2: Articles 8, 9, and 10 In-Depth | 25% | High - detailed procedural requirements | Conceptual flow of risk management cycle |
| Domain 3: Privacy, Transparency, Data Governance | 20% | High for AI Act provisions, low for GDPR | GDPR principles, ISO 27001 basics |
| Domain 4: Ethical AI and Human Rights | 15% | Low - external frameworks not in reference | Ethics frameworks, human rights conventions |
| Domain 5: Compliance Lifecycle Management | 20% | Partial - Act lifecycle provisions only | ISO/IEC 42001, NIST AI RMF structure |
Building a Usable Reference: Annotation Before Exam Day
Your annotated EU AI Act copy is a competitive advantage - if it is built correctly. Many candidates make the mistake of annotating reactively as they study, producing a document that mirrors their confusion rather than clarifying it. A more disciplined approach:
Phase 1: Structure Mapping
Before your first read-through, create a table of contents overlay: a handwritten or digital index that maps exam-relevant topics to title, chapter, and article numbers. This is your navigation layer. A candidate who knows that data governance requirements sit in Article 10 of Chapter 2, Title III, will locate them in seconds.
Phase 2: High-Risk Annotations
Focus deep annotation energy on the sections most likely to appear under Domain 2 - Articles 8, 9, and 10. For each article, write a two-to-four word summary in the margin: what the article requires, not what it says. "Article 9: iterative risk management process - lifecycle-wide" is more useful than a highlighted block of legislative text.
Phase 3: Cross-Reference Flagging
The AI Act's high-risk system provisions cross-reference Annex I and Annex III repeatedly. Flag these cross-references with sticky arrows or digital bookmarks so you can move between them without reading - just clicking or flipping.
Once your annotation is complete, do timed practice runs using the AICP practice test platform with your annotated document open. Identify which questions you still reach for the reference on, and whether your annotations actually help you find the answer quickly.
The Time Reality: 90 Minutes, 40 Questions, One Document
Ninety minutes for 40 questions gives you an average of 2 minutes and 15 seconds per question. That sounds generous - until you factor in the time it takes to open, navigate, and read from a reference document. A single lookup that takes 90 seconds eats 67% of that question's time budget.
This arithmetic has one clear implication: the open-book policy is a safety net for specific verifications, not a replacement for preparation. Candidates who need to look up more than four or five items during the exam are likely not prepared at the level the 65% passing threshold demands.
The recommended total preparation time for the AICP is approximately 112 hours, including 14 contact hours of accredited training. That remaining self-study time is where you build the fluency that makes the open-book policy useful rather than a distraction. To understand more about eligibility and training requirements, review the AICP Exam Prerequisites and Eligibility Requirements 2026 article.
A Focused Preparation Calendar
Given the 112-hour total preparation recommendation and the five domain structure, here is a realistic pre-exam schedule for a candidate who has completed their accredited training and is now in the self-study phase:
Foundation and Reference Setup
- Read the EU AI Act in full - focus on structure, not memorization
- Build your annotation index: title and chapter map, key definitions page
- Review Domain 1 content (20% weight) - scope, definitions, prohibited practices
- Goal: complete reference architecture so navigation becomes automatic
Domain 2 Deep Work - Articles 8, 9, 10
- Annotate Articles 8, 9, and 10 intensively - margin summaries, cross-reference flags
- Work through scenario exercises on high-risk AI system classification
- Run timed practice questions on Domain 2 specifically using the practice test platform
- Goal: navigate Articles 8-10 and locate specific requirements in under 45 seconds
Domains 3 and 4 - Memory-Heavy Content
- Study GDPR principles, ISO 27001 basics, and transparency obligations from memory
- Annotate Title IV of the AI Act (transparency) - high open-book value
- Commit Domain 4 ethical frameworks to memory - these cannot be looked up
- Goal: fluency in GDPR-AI Act intersections; confidence in ethical framework application
Domain 5 Integration and Full Exam Simulation
- Review ISO/IEC 42001 management system structure and NIST AI RMF from training materials
- Complete two full 40-question timed practice exams with annotated reference open
- Identify lookup patterns - any article you look up more than twice needs deeper study
- Goal: complete a full practice exam under 85 minutes with reference use under 10 minutes total
Candidates who have questions about whether their training background satisfies accreditation requirements before beginning this preparation schedule should review the AICP Exam Prerequisites and Eligibility Requirements 2026 in detail before registering.
Frequently Asked Questions
Yes. Annotation of the permitted reference document is allowed and encouraged. You can highlight, add margin notes, bookmarks, and cross-reference flags before exam day. The key constraint is that you cannot use additional documents, websites, or external resources - only the EU AI Act text as your open-book reference.
No. The ISO/IEC 42001 AI management system standard and the NIST AI RMF are not automatically permitted open-book references. Only the EU AI Act text is explicitly permitted. Content from these frameworks, which is covered in Domains 3 and 5, must be mastered through your accredited training and self-study.
Your accredited training provider typically supplies the exam literature package, which includes a version of the EU AI Act formatted for exam use. Since the exam fee is normally bundled with training packages ranging from approximately $800 to $1,700, this material is part of your package. Confirm the format with your provider - some supply formatted PDFs that are easier to navigate than raw legislative downloads.
Only if you use the reference selectively. With 40 questions in 90 minutes, your average per-question budget is just over two minutes. Efficient candidates limit reference lookups to specific detail verification - article numbers, annex classifications, exact procedural requirements - rather than using the document to understand concepts during the exam. Preparation is what makes the open-book policy an asset rather than a time drain.
Not in the way candidates hope. The AICP is designed to test application and analysis, meaning questions present realistic compliance scenarios that require reasoning, not lookup. The open-book policy reflects how compliance work actually functions - professionals have the regulation available, but they must be able to interpret and apply it quickly and accurately. Candidates who treat the reference as a substitute for preparation consistently struggle with time and conceptual questions.
Ready to Start Practicing?
Test your ability to apply the EU AI Act under timed, exam-realistic conditions. Our AICP practice tests are built around the same five domains, question formats, and scenario-based reasoning the real exam demands - so you walk in knowing exactly how to use your open-book reference when it counts.
Start Free Practice Test