Preparation guide
ISO 42001 Lead Implementer study plan
Use the source-backed decision map, original scenario and study sequence before practising.
Read the study guidePECB exam preparation
ISO/IEC 42001 Lead Implementerexam preparation
The ISO/IEC 42001 Lead Implementer exam is a three-hour PECB certification examination for people who will build and run an AI management system. It contains 80 multiple-choice questions across six weighted competency domains, and the pass mark is 70%. Each question has three options: one correct answer and two distractors. The exam is open book, but only three types of material are permitted.
- Questions
- 80
- Pass mark
- 70%
- Domains
- 6
- Format
- Open book
Choose what you need
Training, free examples and full preparation are separate.
Select the path that matches what you already have. Your Labs purchase unlocks only this exact exam.
Start here
Five free questions
See original questions, correct answers, distractor reasoning and sources without creating an account.
Try free questionsFull Aegentra Labs access
$49 + GST for 1 month
Or $99 + GST for 12 months. Complete bank, casual mode, exam mode, saved results and domain feedback.
Choose Labs accessOfficial PECB training
Need the course and exam pathway?
Buy official course materials and the applicable examination pathway separately through Aegentra Academy.
View the official courseAeges AI · Learning Intelligence
Results analysed with Aeges AI
Complete a ISO/IEC 42001 Lead Implementer practice session, then use Aeges AI learning intelligence to understand how your submitted answers performed across the qualification. For this exam, the analysis distinguishes AIMS planning, implementation, monitoring, improvement and certification-audit preparation signals.
See how Aeges AI works- Competency map
- 6 domains
- Learning signal
- Relative strength and gap
- Next decision
- Revision priority
Written by Harry Sidhu, ISO 27001 Lead Implementer · Director and Principal Consultant, Aegentra. Facts are checked against the published sources listed below.
Published exam facts
What is on the ISO/IEC 42001 Lead Implementer exam?
These facts come from PECB’s published documents. Where PECB does not publish a detail, this page says so instead of repeating an unsupported figure.
- Questions
- 80
- Pass mark
- 70%
- Duration
- 180 minutes
Stand-alone and scenario-based multiple choice.
Equivalent to 56 correct answers from 80 questions.
Open-book materials
What you may bring- ISO standardA hard copy of the ISO/IEC 42001 standard
- Course materialsTraining course materials, through the PECB Exams app and/or printed
- Personal notesPersonal notes taken during the training course, through the PECB Exams app and/or printed
Retakes: PECB sets no limit on the number of retakes, but applies minimum waiting periods between attempts. Training bought through a PECB partner normally includes the first attempt and one free retake, to be used within 12 months.
Your revision map
How is the exam weighted across domains?
The published handbook allocates all 80 questions across 6 competency domains. The simulation below follows that allocation.
- Domain 121.25%17 questions
Fundamental principles and concepts of an artificial intelligence management system
AI concepts and terminology, machine learning and neural networks, the distinct features of AI systems, and risk-based classification of AI systems. Assessed at comprehension, application and analysis level.
- Domain 26.25%5 questions
Artificial intelligence management system
The structure of ISO/IEC 42001 itself — clauses 4 to 10, the purpose of an AIMS, and what Annexes A, B, C and D each contain. The smallest domain on the exam, at five questions.
- Domain 325%20 questions
Planning of an AIMS implementation based on ISO/IEC 42001
Gap analysis, context and interested parties, AIMS objectives and policy, resourcing, the risk assessment process, and drafting the Statement of Applicability. The largest domain, assessed at evaluation level.
- Domain 422.5%18 questions
Implementation of an AIMS based on ISO/IEC 42001
Designing and implementing AI controls, documented information, communication, training and awareness, managing AI operations, and engaging interested parties. Assessed at evaluation level.
- Domain 512.5%10 questions
Monitoring and measurement of an AIMS based on ISO/IEC 42001
AIMS metrics, the internal audit programme, management review, and the difference between major and minor nonconformities. Assessed at comprehension, application and analysis level.
- Domain 612.5%10 questions
Continual improvement and preparation for an AIMS certification audit
Root cause analysis, corrective action, continual improvement, selecting a certification body, and what happens across stage 1 and stage 2 audits. Assessed at evaluation level.
Question structure
What kinds of questions are asked?
Expect a mix of direct knowledge checks and applied scenarios. The emphasis is on choosing the action a competent lead implementer would take.
- Stand-alone multiple choice
- Independent questions that carry their own context. Each has three options — one correct answer and two distractors. These carry the terminology and clause-structure content.
- Scenario-based multiple choice
- A written scenario about an organisation, followed by five questions that depend on it. These ask what a competent implementer would do next, not what a clause says.
- Evaluation-level questions
- PECB states that 48 of the 80 questions — 60% — test evaluation rather than comprehension, application or analysis. All of domains 3, 4 and 6 sit at this level.
Study strategy
How should you sequence your study?
The weightings decide the order, not the syllabus. Domains 3 and 4 are 38 of the 80 questions between them, and both are assessed at evaluation level. Spend your time where the marks are.
- Read clauses 4 to 10 of ISO/IEC 42001 once, straight through. You are building a map, not memorising. If you have implemented an ISO management system before, this will take an evening.
- Work Annex A properly. Thirty-eight controls across nine objectives. For each one, write a sentence on what evidence would prove it operates. That sentence is what evaluation-level questions test.
- Separate risk assessment from impact assessment, deliberately. Write both definitions in your own words and check that they point in opposite directions. This single distinction shows up across domains 3, 4 and 5.
- Draft a Statement of Applicability for an imagined organisation. Include at least three exclusions with written justifications. Producing one badly in private is the cheapest way to stop producing one badly in the exam.
- Learn the audit vocabulary last. Stage 1 versus stage 2, major versus minor nonconformity, corrective action versus correction. Domain 6 is only ten questions, but they are quick marks and they are pure definition.
Build your open-book index while you study, not the night before. The permitted materials include your own course notes, and a two-page index pointing at where things are is worth more on the day than a third read of the standard.
Where do candidates actually lose marks?
Not on the standard. On the reasoning the standard expects.
- Reusing the risk register as an impact assessment. A risk assessment asks what could harm the organisation. An impact assessment asks what the organisation's AI could do to individuals, groups and society. Same shape, opposite direction. Scenario questions are built on this distinction.
- Treating a documented control as an operating control. Questions describe a control that exists on paper and evidence that contradicts it. The expected answer is almost always to test the evidence, not to accept the document.
- Answering what a clause says instead of what to do next. Sixty per cent of questions test evaluation. When three options are all technically true, the right one is the one a competent implementer would act on first.
- Over-preparing domain 2. The structure of the standard feels like the exam because it is easy to revise. It is five questions out of eighty.
- Assuming open book means unlimited. Three permitted material types, none of them the internet. Candidates who plan to look things up mid-exam lose time they did not budget.
- Confusing the credential with the exam. Passing does not award Lead Implementer. The tier you receive depends on experience you attest to afterwards, and plenty of candidates pass and receive Provisional Implementer.
Candidate questions
ISO/IEC 42001 Lead Implementer exam FAQs
Direct answers about time, materials, retakes, credentials and the knowledge expected before exam day.
How long is the ISO/IEC 42001 Lead Implementer exam?
The ISO/IEC 42001 Lead Implementer exam lasts three hours. PECB states this duration in its official four-page course brochure. PECB also allows candidates sitting a Lead exam in a non-native language to request 30 additional minutes, subject to its examination rules.
What does open book mean for this exam?
It means three specific things and nothing else: a hard copy of the ISO/IEC 42001 standard, your training course materials, and your own notes from the course. Course materials and notes may be printed or accessed through the PECB Exams app. It does not mean internet access, and it does not mean other people. Candidates who assume otherwise are the ones who run out of time.
What happens if you fail the ISO/IEC 42001 Lead Implementer exam?
PECB sets no limit on how many times you can retake the exam, though it applies minimum waiting periods between attempts. Failed candidates are emailed a list of the domains they performed poorly in, which is the most useful preparation material available. Training purchased through a PECB partner normally includes the first attempt plus one free retake within 12 months.
Do you get the Lead Implementer credential just by passing?
No. Passing the exam qualifies you for the scheme, but which credential you are awarded depends on experience you attest to afterwards. Provisional Implementer requires none. Implementer requires two years of professional experience with one in AI management, and 200 project hours. Lead Implementer requires five years with two in AI management, and 300 project hours. You can sit the exam first and upgrade later.
How many questions do you need right to pass?
The pass mark is 70%, so 56 of the 80 questions. Because the domains are weighted by question count rather than by difficulty, the arithmetic is straightforward: domains 3 and 4 together are 38 questions, so a candidate weak in planning and implementation cannot compensate elsewhere. Domain 2 is only five questions and is the cheapest domain to over-prepare.
Is the exam about the standard or about implementing it?
Mostly about implementing it. PECB states that 60% of questions test evaluation rather than recall, and the three evaluation-level domains — planning, implementation, and continual improvement plus audit preparation — are 60% of the exam between them. Memorising clause numbers is necessary but nowhere near sufficient.
Who should take the ISO/IEC 42001 Lead Implementer exam?
It is designed for people who plan, implement, manage, monitor or improve an artificial intelligence management system. Typical candidates work in AI governance, risk, privacy, information security, compliance, consulting or programme management. It is an implementation qualification: choose the Lead Auditor pathway instead if your main job is independently assessing whether another organisation’s AIMS conforms.
Do you need ISO 27001 before taking ISO 42001 Lead Implementer?
No. PECB does not require an ISO 27001 credential. Its stated prerequisite is general knowledge of artificial intelligence management systems and ISO/IEC 42001. An ISO 27001 background helps because both standards use the Annex SL management-system structure, but ISO 42001 adds AI-specific risk, impact, lifecycle, data, transparency and human-oversight requirements that still need separate study.
What is the difference between Lead Implementer and Lead Auditor?
A Lead Implementer establishes and operates the AIMS: scope, policy, risk and impact assessments, Statement of Applicability, controls, monitoring and certification readiness. A Lead Auditor plans and conducts audits of that system and evaluates conformity using audit principles and evidence. Choose Implementer when you will build the system; choose Auditor when you will independently assess it.
Aegentra Academy and advisory
From exam knowledge to an operating AIMS
Connect the qualification to official training, implementation work, independent audit and maintained ISO/IEC 42001 resources.
Real projects require a defensible scope, risk assessment, Statement of Applicability, operating controls and independent audit evidence. Downloadable templates and worked material are maintained in the Aegentra Academy Library rather than duplicated on Aegentra Labs.
Official trainingISO 42001 Lead Implementer coursePECB course materials, examination access and two attempts through Aegentra Academy.Career guideBecoming a Lead ImplementerCredential tiers, project-hour evidence, roles and the Australian career pathway.Implementation serviceBuild an ISO 42001 AIMSHow Aegentra scopes, implements and evidences an AI management system for an organisation.Independent auditTest the AIMS before certificationClause 9.2 internal audit, evidence sampling, findings and corrective-action close-out.Aegentra Academy LibraryDownload ISO 42001 templates and worked materialMaintained templates, implementation documents, mappings and downloadable resources.