How much does the ISO 42001 Foundation exam cost?
Nothing extra. The official PECB examination voucher is included in the course price, so there is no separate exam fee to pay later. The ISO 42001 Foundation course costs $399 + GST as flexible Self-Study or $449 + GST as guided eLearning, and both include two exam attempts — the initial sit plus one free resit within 12 months — with 12 months of myPECB access. A 2-day live Online Class is $1,529.10 + GST (10% off; standard price $1,699).
All ISO 42001 training through Aegentra Academy is official PECB certification training, with the ISO 42001 exam cost included in the course price rather than billed separately.
The optional $89 + GST Aegentra Labs add-on offered on this page is supplementary exam preparation, not a fee for the official PECB examination. The PECB exam voucher is already included in the course price.
What is on the ISO 42001 Foundation exam?
PECB does not publish a candidate handbook for the ISO/IEC 42001 Foundation examination, and Aegentra does not invent one. What is published is the credential itself: passing makes you a PECB Certificate Holder in ISO/IEC 42001 Foundation, and no professional experience is required to sit it.
Be careful comparing figures across providers here, because several quote exam specifications that belong to entirely different schemes — question counts and durations vary between certification bodies for the same standard. If an exam detail matters to your planning, ask the provider which scheme the figure comes from.
Do you need ISO 27001 before ISO 42001?
No. ISO/IEC 42001 is a management system standard in its own right and can be implemented and certified independently. In practice most Australian organisations meet it second, because they already run an ISO 27001 ISMS and an AIMS shares the same Annex SL structure — context, leadership, planning, support, operation, evaluation, improvement — so the clauses line up almost one to one.
What ISO 42001 adds is everything specific to AI: impact assessment on people and society, data and model governance across the AI lifecycle, transparency obligations, and its own Annex A controls. If you already hold ISO 27001, Foundation is the fastest way to see exactly where the two meet — the ISO 27001 Foundation course covers the other side.
Foundation certifies you, not your organisation. Certifying a company to ISO/IEC 42001 is a separate project — the ISO 42001 certification guide for Australia covers what that costs and how long it takes. Ready to go further? Lead Implementer builds the AIMS; Lead Auditor audits one.
Free ISO 42001 documents to study alongside the course
Foundation teaches the clause structure and what an AI management system is for. Seeing those ideas applied to a real organisation is the fastest way to make them stick, so we publish the working documents in full and free — no email required.
- Statement of Applicability (CSV) or PDF — all 38 Annex A controls across the nine themes, each with an applicability decision and a written justification. The clearest way to see what the standard actually asks for.
- Voluntary AI Safety Standard mapped to ISO 42001 (CSV) or PDF — all 10 Australian guardrails with the ISO/IEC 42001 clause that satisfies each. The clearest single view of how the standard and Australian AI policy fit together.
- AI system inventory (CSV) or PDF — eight worked AI systems with purpose, data, risk tier and owner. Read this first — an AI inventory is where every AIMS actually starts.
- AI system impact assessment (CSV) or PDF — twelve sections worked through for a résumé screening assistant. Read it to see what Clause 8.4 asks for in practice, rather than in the abstract.
What makes ISO 42001 different from ISO 27001?
Both follow the Annex SL structure, so clauses 4 to 10 line up almost one to one — context, leadership, planning, support, operation, evaluation, improvement. If you already know ISO 27001, half of ISO 42001 is familiar the moment you open it.
What is new sits in Annex A, which defines 38 controls across territory an information security standard never had to cover: AI impact assessment, data quality and provenance across the AI lifecycle, third-party AI provider management, human oversight, and transparency to the people an AI system affects.
The single biggest conceptual jump is Clause 8.4, the AI system impact assessment. ISO 27001 asks what could harm the organisation. ISO 42001 also asks what the organisation's AI could do to individuals, groups and society — a different question, pointing outward instead of inward. Newcomers from a security background conflate it with risk assessment more often than any other part of the standard. ISO/IEC 42005 gives detailed guidance on conducting one and ISO/IEC 23894 covers AI risk management; neither is certifiable, but both are worth knowing by name.
Every ISO 42001 course Aegentra Academy sells is official PECB certification training, and the ISO 42001 exam voucher is included in the course price rather than billed separately — course and exam together. Prices are in Australian dollars, ex-GST, with the tax invoice issued at checkout.
As an ISO 27001 practitioner, how much of ISO 42001 is new to me?
Roughly half. Clauses 4 to 10 follow the same Annex SL structure you already know, so the management system half will feel familiar the moment you open the standard. What is new is Annex A — 38 controls covering AI impact assessment, data provenance across the AI lifecycle, human oversight and transparency — plus Clause 8.4, which has no ISO 27001 equivalent at all.
Foundation is the fastest way to see exactly where the two meet, and most people with an ISO 27001 background finish it in well under the 8–12 hours quoted.
As someone with no AI background, can I do this course?
Yes. There is no prerequisite and no technical requirement — you do not need to build or understand models. ISO 42001 is a governance standard, so the work is inventory, assessment, accountability and evidence. What you need is enough understanding of how AI systems behave to ask what evidence should exist, and that is what the course teaches.