An AI governance professional turns AI rules into working practice. For each AI system an organization builds, buys or deploys, they decide whether the EU AI Act applies, work out the organization's role, classify the risk, and put the documentation, human oversight and monitoring in place so the answer holds up when a regulator, customer or auditor asks for evidence.
The EU AI Act sets out what must be true. ISO/IEC 42001 gives you a management system to make it true and keep it true. The most credible route combines both: the PECB EU AI Governance Professional certification for the law, then ISO/IEC 42001 Lead Implementer or Lead Auditor for the system around it. Neither certification makes your organization compliant. Both make you the person who can show how compliance is being built.
PECB EU AI Governance Professional
Learn to apply the EU AI Act in practice
Self-study in English with a free 60-minute 1-on-1 session with a PECB Certified Trainer and email and WhatsApp support until you clear the exam. Not a slide reader. A practitioner.
reconn.io | Dubai | Remote delivery worldwide
Key takeaways
- The EU AI Act is binding law with obligations that depend on your role and the risk class of each system. ISO/IEC 42001 is a voluntary, certifiable management system standard.
- ISO/IEC 42001 is not a harmonized standard under the EU AI Act, and an ISO/IEC 42001 certificate does not confer legal compliance.
- Stand-alone high-risk obligations now apply from 2 December 2027 and embedded high-risk from 2 August 2028. Prohibitions, AI literacy, general-purpose AI duties and general application have already started.
- The PECB EU AI Governance Professional exam has 80 multiple-choice questions, a 70% pass mark and is open book. The Provisional credential needs no work experience.
- Employers value people who can classify a real system and produce the evidence. Choose training that includes practitioner mentoring, not only courseware.
What an AI governance professional does
The job title is generic, and it should stay that way. What matters is the set of questions the person is accountable for answering, because those do not change from one employer to the next. Pick a question to see what answers it.
Does the Act apply?
The Act's scope and definitions: what counts as an AI system, where it is placed on the market or used, and who is affected.
What is our role?
Provider, deployer, importer, distributor or authorized representative. One organization can hold different roles for different systems.
Which risk class?
Prohibited practices, high-risk systems, systems with transparency duties, and the rest. The class decides the obligations.
What evidence exists?
Technical documentation, records, transparency information and human oversight arrangements, kept for each system.
Who owns it, and how is it monitored?
A management system with named roles, risk assessment, internal audit, management review and continual improvement. This is where ISO/IEC 42001 helps.
Example. A mid-size company buys a CV-screening tool and also builds an internal chatbot that it puts into service under its own name. For the screening tool it is a deployer, and employment is a listed high-risk area. For the chatbot it is the provider, with provider obligations. One inventory, two different roles, two different workloads. Writing that down for every system is the first real task of the job.
Where the EU AI Act stands in October 2026
The timeline has moved since the Act was first published, so get the current dates straight before you plan a study schedule or a compliance program. The high-risk dates below come from the AI Omnibus, Regulation (EU) 2026/1744, which the European Parliament lists as adopted and published in the Official Journal on 24 July 2026.
- 1 August 2024DoneThe AI Act enters into force.
- 2 February 2025DoneProhibited practices and AI literacy obligations apply.
- 2 August 2025DoneGovernance rules and obligations for general-purpose AI models apply.
- 2 August 2026DoneGeneral application of the Act, including the Article 50 transparency duties.
- You are here: late October 2026Build your AI system inventory and role map now. It feeds every later deadline.
- 2 December 2026AheadTransitional deadline for the new prohibition on non-consensual intimate imagery and child sexual abuse material, and for marking synthetic content on systems already on the market before 2 August 2026.
- 2 December 2027AheadStand-alone high-risk systems under Annex III (for example employment, credit and education uses).
- 2 August 2028AheadHigh-risk systems embedded in products covered by sectoral law (Annex I).
Two points are easy to get wrong. The delay applies to high-risk systems, not to the whole Act. Prohibitions, AI literacy and general-purpose AI obligations are already running, so a 2027 high-risk date is not a reason to postpone an inventory of your AI systems. And dates are only one input: which date matters to you depends on your role and risk class for each system.
ISO/IEC 42001 Lead Implementer
Build the management system around the Act
Learn to establish, implement and run an AI management system. Available as eLearning with a free 1-on-1 session with a PECB Certified Trainer and support until you clear the exam.
reconn.io | Dubai | Remote delivery worldwide
How ISO/IEC 42001 fits
ISO/IEC 42001 is a management system standard for AI. It asks an organization to define its policies and roles for AI, assess AI risks and the impact of its AI systems, apply controls across the life cycle, audit itself, review results at management level and improve. It can be certified by an accredited certification body.
What it does not do is equal legal compliance. It is not a harmonized standard under the EU AI Act, and a certificate does not show that any given system meets the Act. What it gives you is structure and evidence: named owners, a repeatable process and records that a regulator or customer can follow. Practitioners treat it as the system around the law.
Implementation services
Want help standing up an AI management system?
reconn supports organizations with ISO/IEC 42001 implementation and certification readiness. Not a slide reader. A practitioner.
reconn.io | Dubai | Remote delivery worldwide
EU AI Act vs ISO/IEC 42001
| Aspect | EU AI Act (Regulation (EU) 2024/1689) | ISO/IEC 42001 |
|---|---|---|
| Nature | Binding EU regulation. | Voluntary international standard for an AI management system. |
| Who it speaks to | Organizations by role: provider, deployer, importer, distributor. | Any organization that develops, provides or uses AI systems. |
| What it asks for | Obligations that scale with the risk class of each system. | Policies, roles, risk and impact assessment, controls, internal audit, management review, improvement. |
| Evidence it produces | Per-system documentation, records and transparency information. | A documented, auditable management system that an accredited body can certify. |
| Legal status | Compliance is a legal obligation. | Not a harmonized standard under the Act. Certification does not confer legal compliance. |
Most of the confusion in this field comes from reading a management system certificate as proof that individual AI systems comply with the law.
The skills the exam tests
PECB builds the EU AI Governance Professional exam around six domains. The weighting tells you where the work is: documentation and transparency carries the most weight, followed by management systems, risk, data and controls. Role determination comes third. Most of the exam is applied work, not recall.
| Domain | Questions | Weight |
|---|---|---|
| 5. Documentation, transparency and compliance formalization | 19 | 23.75% |
| 4. Management systems, risk, data and technical controls | 17 | 21.25% |
| 2. Applicability, scope and role determination | 15 | 18.75% |
| 1. EU AI Act foundations and regulatory context | 10 | 12.50% |
| 6. Compliance monitoring and life cycle management | 10 | 12.50% |
| 3. Organizational governance and compliance planning | 9 | 11.25% |
The certification path
PECB Certified EU AI Governance Professional
You can apply the Act: applicability, roles, risk classification, governance, documentation and monitoring. Self-study, in English.
PECB ISO/IEC 42001 Lead Implementer
You can establish and run an AI management system that produces evidence the Act's duties can draw on.
PECB ISO/IEC 42001 Lead Auditor
You can audit an AI management system against the standard, internally or for a client.
The PECB EU AI Governance Professional has two levels. The Provisional credential needs the exam and the PECB Code of Ethics, with no work experience. The full credential adds 5 years of professional experience including 2 years in AI governance, 300 hours of project activities and two professional references. ISO/IEC 42001 Lead Implementer and Lead Auditor are five-day courses with an open-book exam and a 70% pass mark, followed by a certification application based on your professional experience.
Why the way you learn matters
A certification shows you passed an exam. What an employer or client pays for is the ability to classify a real system, justify the role you assigned, and produce the evidence. That ability comes from working through real scenarios with someone who has done the work, which is why reconn attaches a mentor to every self-study and eLearning enrollment.
1-on-1 session
A free 60-minute session with a PECB Certified Trainer.
Support until you pass
Email and WhatsApp support until you clear the exam, within 12 months of enrollment.
Fees covered
The first exam attempt, one free retake, the certification application fee and the first year of the annual maintenance fee.
PECB sets and proctors the exam on its Exams app. Support is not a pass guarantee, and we do not offer one. If your organization needs more than individual certifications, reconn also supports ISO/IEC 42001 implementation and certification readiness. Details are on the ISO 42001 implementation services page.
Which route fits your role
Pick the description closest to your job.
Whichever route you choose, do the unglamorous first step now: list the AI systems your organization builds, buys or deploys, and write down your role for each. Every domain in the exam starts from that list.
Frequently asked questions
What does an AI governance professional do?
An AI governance professional decides how rules such as the EU AI Act apply to the AI systems an organization builds, buys or deploys. They maintain the inventory of systems, determine the organization's role and risk class for each, and make sure documentation, human oversight and monitoring exist and can be evidenced.
Does the EU AI Act require ISO/IEC 42001?
No. The Act does not require ISO/IEC 42001. It is not a harmonized standard under the Act, and certification does not confer legal compliance. It is a management system standard that gives structure and evidence you can use when meeting the Act's obligations.
Should I take the EU AI Governance Professional certification or ISO/IEC 42001 first?
If your job is to decide whether and how the Act applies, start with the EU AI Governance Professional. If your job is to build or audit the management system, start with ISO/IEC 42001 Lead Implementer or Lead Auditor. Many practitioners end up with both.
Do I need work experience to take the EU AI Governance Professional exam?
No. The Provisional credential requires passing the exam and signing the PECB Code of Ethics, with no professional experience. PECB lists a basic understanding of AI or digital technology as the starting point.
What does the full EU AI Governance Professional credential require?
According to PECB's candidate handbook, the full credential requires passing the exam, 5 years of professional experience including 2 years in AI governance, 300 hours of project activities and two professional references. Confirm current figures in the handbook before you apply.
How hard is the EU AI Governance Professional exam, and is it open book?
The exam has 80 multiple-choice questions with a 70% pass mark. It is open book: you can use a copy of the EU AI Act, the course materials and your own notes. It is taken online through the PECB Exams app with remote proctoring.
When do the EU AI Act high-risk rules apply now?
Under Regulation (EU) 2026/1744, stand-alone high-risk systems under Annex III are subject to the high-risk rules from 2 December 2027, and high-risk systems embedded in regulated products from 2 August 2028. Prohibitions, AI literacy and general-purpose AI obligations already apply.
Does this certification make my organization compliant with the EU AI Act?
No. It certifies you as an individual. Compliance is assessed per AI system and depends on your role, the risk class of the system and the evidence you hold. The certification helps you do that work but does not replace it or legal advice.
What does reconn include with enrollment?
Every reconn enrollment includes a free 60-minute 1-on-1 session with a PECB Certified Trainer and email and WhatsApp support until you clear the exam, within your 12-month enrollment window. The fee covers the first exam attempt, one free retake, the certification application fee and the first year of the annual maintenance fee. PECB sets and proctors the exam.
Sources
- Regulation (EU) 2024/1689 (Artificial Intelligence Act), EUR-Lex, Official Journal of the European Union
- Digital Omnibus on AI, European Parliament Legislative Train (status, Regulation (EU) 2026/1744, high-risk dates)
- ISO/IEC 42001:2023, Artificial intelligence, Management system, International Organization for Standardization
- EU AI Act Omnibus Agreement, Gibson Dunn (application dates and other changes)