GLOBAL AI CERTIFICATION COUNCIL
ISO/IEC 42001 Internal Auditor Certification Training in Malaysia
- Earn 32 CPD/PDU hours on completion of the course
- Certification valid for three years, renewable with 32 CPD credits
- Self-paced learning, so you can start immediately and study on your own schedule
- Two packages available, either the full course or membership and exam only
- 32 CPD/PDU hours
- 2–3 day programme
- HRD Corp claimable

Issued by GAICC
Global AI Certification Council


ProCert is an Affiliate Partner of the Global AI Certification Council (GAICC)


OVERVIEW
What an Internal Auditor does
An Artificial Intelligence Management System on paper still has to be tested from the inside. Internal audit is how an organisation finds gaps in ethics, risk and controls before a client, regulator or external auditor asks. ISO/IEC 42001:2023 is the standard those checks run against, and Internal Auditor is the credential for the person who plans and conducts them.
The 2–3 day programme covers the audit sequence: the structure of an AIMS, ISO 19011 principles, planning and checklists, interviews, nonconformities, reporting and a mock audit. Completing the self-paced course package meets the 32 contact hours GAICC require before you sit the 60-question examination.
Foundation is the vocabulary. Lead Implementer is how the system is built. This page is the in-house audit step — not the independent Lead Auditor credential.
WHO IT IS FOR
Who should take this certification
Built for professionals who need to run internal AI governance audits, not only describe the standard.
Internal auditors conducting AI governance checks against ISO/IEC 42001
AI risk managers responsible for risk assessments, ethics and controls
Compliance and regulatory officers ensuring the organisation meets AI ethics, privacy and risk rules
IT and AI governance professionals overseeing an Artificial Intelligence Management System
Quality assurance and risk teams focused on process integrity and audit readiness
Project managers and AI team leads supporting documentation and audit preparation
OUTCOMES
What you will be able to do
By the end of the course you should be able to plan and report an internal ISO/IEC 42001 audit.
- Plan and conduct internal audits — prepare plans, define scope and collect evidence against ISO/IEC 42001
- Identify gaps and risks — detect compliance gaps, ethical risks and process weaknesses in AI systems
- Draft audit reports and corrective action plans — findings, nonconformities and practical recommendations
- Support certification readiness — help the organisation prepare for an external ISO/IEC 42001 audit
WHY PROCERT
Why enrol through us
Claimable by your employer
HRD Corp registered provider. Where a programme is approved, your employer can claim against their levy.
Malaysian support
A local team handling enrolment, exam booking and any questions along the way.
Team enrolment
Group registration handled end to end, with a single invoice for the whole team.
| PackageSelf-paced course package | Through ProCertUS$698 | Typical listed priceUS$798 |
|---|---|---|
| HRD Corp levy, where the programme is approved | Included | Not included |
| Malaysian enrolment and exam-booking support | Included | Not included |
THE CREDENTIAL
GAICC Certified ISO/IEC 42001 Internal Auditor
The GAICC certification programme is CPD accredited.

INCLUDED
This course includes
- 7 modules across 2–3 days
- 32 CPD/PDU hours on completion
- Certification exam included One exam attempt included
- GAICC Certificate of Achievement
- Exam simulator access
- Exam voucher
Included resources to support your learning
- ISO/IEC 42001, ISO 23894 and ISO 42005 standards summary
- ISO/IEC 42001 case-study workbook
- ISO/IEC 42001 AI prompt guide
- ISO/IEC 42001 templates and checklists
COURSE MODULES
Curriculum
A step-by-step path through planning, conducting and reporting an internal AI governance audit under ISO/IEC 42001.
Seven modules
7 modules
Introduction to ISO/IEC 42001 AIMS
scope, objectives and structure of AI Management Systems; AI governance, risk management and certification requirements
Internal audit principles and practices
audit ethics, independence and objectivity aligned with ISO 19011
Audit planning and checklists
designing audit plans, creating checklists and defining evidence requirements
Conducting audit interviews
interview techniques to gather evidence and assess AI processes
Identifying nonconformities
detecting compliance gaps, risks and ethical concerns in AI systems
Reporting and corrective actions
writing clear, actionable audit reports with recommendations
Mock audit and review session
a full-scale internal audit simulation


CERTIFICATION DETAILS
Examination and certification
| Standard | ISO/IEC 42001:2023 |
|---|---|
| Credential | GAICC Certified ISO/IEC 42001 Internal Auditor |
| Issuer | Global AI Certification Council (GAICC) |
| Exam format | 60 multiple-choice questions, online proctored |
| Exam duration | 90 minutes |
| Passing score | 70% |
| Language | English |
| Validity | 3 years |
| Renewal | 32 CPD credits |
| CPD/PDU earned | 32 on completion |
| Digital certificate and badge | Secure, verifiable and shareable |
| Eligibility | 32 contact hours of structured ISO/IEC 42001 training. The self-paced course package includes training that meets this requirement. |
HOW IT FITS
How it fits with standards you may already run
| Standard | What it governs | Relationship to ISO/IEC 42001 |
|---|---|---|
| ISO/IEC 27001 | What it governsInformation security management | Relationship to ISO/IEC 42001Shares the same management system structure. Organisations certified to 27001 usually find 42001 familiar and can reuse much of the governance scaffolding. |
| ISO 9001 | What it governsQuality management | Relationship to ISO/IEC 42001Same high-level structure. Where 9001 governs process quality, 42001 governs the behaviour and oversight of AI systems specifically. |
| ISO/IEC 27701 | What it governsPrivacy information management | Relationship to ISO/IEC 42001Overlaps where AI systems process personal data. Privacy controls and AI governance controls are complementary rather than duplicative. |
| ISO/IEC 38507 | What it governsGovernance implications of AI for the board | Relationship to ISO/IEC 42001Sets governance expectations at board level. ISO/IEC 42001 is the operational management system that delivers against them. |
INSTRUCTOR
Dr Faiz Rasool
Director at the Global AI Certification Council (GAICC) and PM Training School

A globally certified instructor in ISO/IEC, PMI®, TOGAF®, SAFe®, and Scrum.org disciplines. With over three years’ hands-on experience in ISO/IEC 42001 AI governance, he delivers training and consulting across New Zealand, Australia, Malaysia, the Philippines, and the UAE, combining high-end credentials with practical, real-world expertise and global reach.
LinkedIn — Dr Faiz Rasool (opens in a new tab)ENROL
Enrol on ISO/IEC 42001 Internal Auditor
Choose a package and enter your name and email. If you choose the membership and exam package, you must confirm you have completed the required training.
Most popular
Self-paced course package
US$698
- Video lessons included
- Learning resources
- Exam simulator access
- Examination voucher
- Certificate of completion
Membership and exam package
US$248
- Video lessons included (not included)
- Learning resources
- Exam simulator access
- Examination voucher
Membership included
FAQ
FAQ
What is the GAICC ISO/IEC 42001 Internal Auditor certification?
It is GAICC’s internal-audit credential for ISO/IEC 42001:2023. An Internal Auditor plans and conducts in-house AI governance audits — checklists, interviews, nonconformities and the report the organisation acts on — before an external auditor arrives.
Who is this training for in Malaysia?
Internal auditors whose remit now includes AI, risk and compliance managers, IT and AI governance professionals, quality and risk teams, and project leads preparing documentation for an ISO/IEC 42001 audit.
What are the eligibility requirements?
32 contact hours of structured ISO/IEC 42001 training. The self-paced course package includes training that meets this requirement.
How is the exam set?
Sixty multiple-choice questions, sat online under proctoring, in 90 minutes. The published pass mark is 70%.
How long is the certification valid, and how do I renew it?
The credential is valid for three years. Renewal requires 32 CPD credits in that cycle, then a renewal application.
How many CPD hours will I earn?
You receive 32 CPD/PDU hours on completion of the Internal Auditor course.
What happens if I do not pass the exam?
GAICC members receive one exam voucher per certification. A further attempt after an unsuccessful first sitting requires the applicable exam fee.
What is the difference between the two packages?
The self-paced course package includes the full video course and everything needed to prepare from scratch. The membership and exam package is for candidates who have already completed their ISO/IEC 42001 training and only need the examination, membership and supporting resources.
Can I buy the exam package if I have not done the training?
No. Thirty-two contact hours of structured ISO/IEC 42001 training are required before you can sit the examination. If you have not completed it, choose the self-paced course package.
How is this different from Lead Auditor?
Internal Auditor is the 2–3 day credential for the person who runs in-house AI governance audits and prepares the organisation for an external review. Lead Auditor is the four-day credential for the person who independently plans, conducts and closes Stage 1 and Stage 2 certification audits.
Is the GAICC certification programme CPD accredited?
The GAICC certification programme is CPD accredited.
Can I enrol a team?
Yes. Group rates apply for five or more. Contact us for a corporate quote and consolidated invoicing.
Certifying more than one person?
We handle group enrolment, consolidated billing and HRD Corp documentation.
