GRC and risk professionals
AI governance, enterprise risk, technology risk, compliance and policy roles.
Certification in development
Flagship Professional Certification
AIGRAP™
AI Governance, Risk & Assurance Professional
AIGRAP™ is a professional certification in development for people who evaluate AI governance, risk and controls, assess supporting evidence, and communicate assurance conclusions across the AI lifecycle.
PROFESSIONAL CREDENTIAL
AIGRAP
- Focus
- Governance, risk & assurance
- Level
- Professional
- Status
- In development
Proposed Scheme Design100 Scored Questions (Proposed)120 Minutes (Proposed)3-Year Credential (Proposed)
Purpose
Professional competence across the AI lifecycle.
AIGRAP™ connects governance, risk, compliance, controls, monitoring, audit and assurance in one professional certification.
Its intended focus is professional judgment: evaluating whether controls address identified risks, determining whether evidence supports findings, and communicating the scope and limitations of assurance conclusions.
Status: AIGRAP™ is in development and is not yet open for examination or certification applications.
Intended Audience
Who is AIGRAP™ for?
Experienced professionals who govern, assess, oversee or advise on organizational AI.
Audit professionals
Internal audit, IT audit, cybersecurity audit and independent assurance roles.
Trust professionals
Privacy, data governance, cybersecurity governance and responsible AI roles.
Body of Knowledge
Twelve examination domains.
These draft weightings show the current scheme structure and remain subject to formal approval before applications open.
AI Foundations and Lifecycle
AI concepts, system components, lifecycle stages and operational dependencies.
AI Governance and Accountability
Decision rights, roles, policies, oversight and accountable lifecycle governance.
AI Risk Management
Risk identification, analysis, evaluation, treatment and reporting.
Responsible and Trustworthy AI
Fairness, transparency, explainability, safety and meaningful human oversight.
Regulatory Compliance and Policy
Applicable obligations, policy design and traceable compliance control mapping.
AI Security and Resilience
AI threats, security controls, incident response, continuity and recovery.
Data Privacy and Data Governance
Data quality, provenance, privacy and governance across the AI lifecycle.
Third Party and Supply Chain AI Governance
Due diligence, contractual controls and monitoring of external AI dependencies.
AI Controls and Control Testing
Control design, implementation and tests of operating effectiveness.
Monitoring and Continuous Oversight
Metrics, drift, incidents, change and ongoing governance review.
AI Audit and Evidence
Criteria, scope, evidence, testing, findings and audit traceability.
AI Assurance and Reporting
Defensible conclusions, limitations, residual risk and stakeholder reporting.
Global Reference Landscape
Built around a cross framework approach.
AIGRAP™ draws on multiple reference sources to connect governance, risk, controls and assurance. ISO/IEC 42001 addresses organizational AI management systems; AIGRAP is intended to certify individual competence.
Global core knowledge: AIGRAP is designed around shared governance, risk, controls, evidence and assurance concepts. International standards and principles, together with reference frameworks such as NIST AI RMF, inform this core; they are not presented as universally mandatory requirements.
Regional applicability: References such as the EU AI Act and SDAIA AI guidance provide jurisdiction-specific context. Candidates should distinguish legal obligations from voluntary guidance and determine applicability by jurisdiction, organizational role and AI use case. A regional reference does not mean its requirements apply to every candidate or organization worldwide.
AIGRAP™ is an independent Polaris professional certification. Reference to these sources does not imply certification, accreditation, approval or endorsement by their publishers or governing organizations.
AIGRAP Competency Model
From governance to assurance.
The certification follows a connected professional chain rather than treating governance, risk, compliance and assurance as separate disciplines.
GovernanceRiskComplianceControlsMonitoringAuditAssurance
Assessment
Examination and certification.
The planned examination is intended to assess knowledge and professional judgment through questions and scenarios, including evaluation of controls and supporting evidence. This format does not demonstrate practical performance through a laboratory or workplace assignment.
Secure assessment
The proposed examination comprises 100 scored questions in 120 minutes. The format, timing and delivery arrangements remain subject to validation and formal approval before registration opens.
Professional level entry
Final experience and eligibility requirements will be published with the controlled certification scheme.
Three year credential
The proposed credential validity is three years, subject to formal approval. Final continuing competence and renewal requirements will be published before registration opens.
Candidate Path
Review. Prepare. Demonstrate. Maintain.
Certification preparation training is optional. Candidates may prepare independently or through future Authorized Training Partners. Training remains separate from the certification decision.
Review
Confirm requirements and the Body of Knowledge.
Prepare
Use self study, experience or authorized training.
Demonstrate
Complete the secure examination and applicable requirements.
Maintain
Use the credential responsibly and renew it when required.
Training does not guarantee certification. Polaris Micro LLC retains control of certification decisions; training providers and instructors do not award AIGRAP™.
Certification Authority
Ownership and decisions remain with Polaris.
The credential is governed separately from training delivery.
Polaris Micro LLC, USA
Owns, governs, maintains and issues the AIGRAP™ professional certification.
ATPs
Training will be delivered by Authorized Training Partners under Polaris standards.
Polaris Micro LLC only
Certification decisions and credential issuance remain under Polaris authority.
AIGRAP™
Register your interest.
Receive information when the Body of Knowledge, candidate requirements and launch schedule are published.