Specialty · Specialty exam · AGV
AI Governance & Compliance
Validates that you can accurately interpret vendor usage policies, data processing terms and Korea's AI Basic Act, and translate them into your organization's AI use rules and control framework.
Daily practice · Free
10 questions · 25 min · No sign-up needed
Specialty exam · Proctored
35 questions · 60 min · Raw score of 75 or more · $3.99 / one attempt
Specialty exam detailsExam overview
- Questions
- 35
- Time
- 60 min
- Pass mark
- 75 pts
- Recommended experience
- White Belt (AI Literacy Foundation) level and hands-on experience in privacy or compliance
Every question has five choices and is marked on an OMR answer sheet. Multiple-choice and true-or-false questions ask for the right combination from a box; ordering and matching questions ask for the right arrangement. Judgment questions (L3) are worth 3 points and all others 2; the raw score is converted to a 100-point scale and graded 1 to 9.
Exam domains
1. Vendor policies and data terms20%
2. Korea's AI Basic Act25%
3. Personal information and AI20%
4. Organizational policy and controls20%
5. Risk assessment and accountability15%
Weights follow the Specialty exam. Practice and mock exams may mix domains differently.
What this exam verifies
- Interpret the differences between vendor usage policies and data processing terms
- Explain who Korea's AI Basic Act applies to and the obligations it places on businesses
- Judge where Korea's Personal Information Protection Act (PIPA) meets AI use
- Design the organization's AI use rules and approval procedures
- Ensure accountability through risk assessment and record-keeping
Who it is for
- Legal, compliance and information security staff who set AI adoption policy
- Planning and operations leads at AI service providers
Does not replace legal advice on individual cases.
Domain details
Domain 1. Vendor policies and data terms
- Knowledge: Usage policies, Differences between consumer and enterprise terms, Data retention and training use, Data processing addendum (DPA)
- Skills: Compare data terms across plans
Domain 2. Korea's AI Basic Act
- Knowledge: Scope and definitions, High-impact AI, Labeling obligations for generative AI, Obligations of businesses
- Skills: Determine whether a service is subject to the obligations
Domain 3. Personal information and AI
- Knowledge: Processing principles under PIPA, Pseudonymized information, Cross-border transfers, Automated decisions
- Skills: Judge whether data used for AI training and inference is processed lawfully
Domain 4. Organizational policy and controls
- Knowledge: AI use rules, Approval procedures, Admin controls, Training
- Skills: Design allowed, prohibited and conditional use categories
Domain 5. Risk assessment and accountability
- Knowledge: Risk assessment frameworks, Records and audits, The purpose of frontier safety frameworks
- Skills: Map controls to risk levels
Official documentation
OpenAI
Anthropic
Specialty Course · AI Governance & Compliance
Practice, mock exams and every course book are free. Pay only when you take an official test.