GLOBAL AI CERTIFICATION COUNCIL
ISO/IEC 42001 Lead Auditor Certification Training in Malaysia
- Earn 32 CPD/PDU hours on completion of the course
- Certification valid for three years, renewable with 32 CPD credits
- Self-paced learning, so you can start immediately and study on your own schedule
- Two packages available, either the full course or membership and exam only
- 32 CPD/PDU hours
- 4-day programme
- HRD Corp claimable
Issued by GAICC
Global AI Certification Council
ProCert is an Affiliate Partner of the Global AI Certification Council (GAICC)
OVERVIEW
What a Lead Auditor does
Once an organisation has an Artificial Intelligence Management System on paper, someone still has to test whether it works. Boards, clients and regulators in Malaysia will ask for independent evidence — not a slide deck. ISO/IEC 42001:2023 is the standard those audits run against, and Lead Auditor is the credential for the person who plans, conducts and closes them.
A Lead Auditor builds the audit programme, reviews documented information at Stage 1, collects evidence at Stage 2, classifies nonconformities and presents findings so management can act. The four-day programme walks that sequence: principles and ethics, risk, planning, both audit stages, reporting and a mock audit.
Foundation is the vocabulary. Lead Implementer is how the system is built. This page is the audit step: ten modules, 32 contact hours, and a 60-question examination. Completing the self-paced course package meets the hours GAICC require before you sit that exam.
WHO IT IS FOR
Who should take this certification
Built for mid-career professionals who need to conduct AI governance audits, not only describe the standard.
Internal and external auditors whose remit now includes AI systems
Risk and compliance managers responsible for AI ethics and controls
AI project leads preparing an organisation for ISO/IEC 42001 certification
Quality and governance professionals moving into AI compliance roles
AI consultants supporting clients with audit readiness in Malaysia
OUTCOMES
What you will be able to do
By the end of the course you should be able to plan and close an ISO/IEC 42001 audit, not only sit in one.
- Plan and conduct AI governance audits — prepare audit programmes aligned with ISO/IEC 42001
- Perform Stage 1 and Stage 2 certification audits — assess documentation, processes and operations
- Evaluate AI systems against ISO/IEC 42001 requirements for ethical, secure and compliant governance
- Identify nonconformities and recommend corrective actions so an organisation can close gaps
- Manage audit teams and stakeholder communication — coordinate teams and present findings clearly
WHY PROCERT
Why enrol through us
Claimable by your employer
HRD Corp registered provider. Where a programme is approved, your employer can claim against their levy.
Malaysian support
A local team handling enrolment, exam booking and any questions along the way.
Team enrolment
Group registration handled end to end, with a single invoice for the whole team.
| PackageSelf-paced course package | Through ProCertUS$698 | Typical listed priceUS$798 |
|---|---|---|
| HRD Corp levy, where the programme is approved | Included | Not included |
| Malaysian enrolment and exam-booking support | Included | Not included |
THE CREDENTIAL
GAICC Certified ISO/IEC 42001 Lead Auditor
The GAICC certification programme is CPD accredited.
INCLUDED
This course includes
- 10 modules across four days
- 32 CPD/PDU hours on completion
- Certification exam included One exam attempt included
- GAICC Certificate of Achievement
- Exam simulator access
- Exam voucher
Included resources to support your learning
- ISO/IEC 42001, ISO 23894 and ISO 42005 standards summary
- ISO/IEC 42001 case-study workbook
- ISO/IEC 42001 AI prompt guide
- ISO/IEC 42001 templates and checklists
COURSE MODULES
Curriculum
Gain a complete, step-by-step understanding of how to plan, conduct and close AI governance audits under ISO/IEC 42001.
Ten modules
10 modules
Introduction to AI governance and ISO/IEC 42001
fundamentals, scope and compliance requirements
Audit principles and ethical auditing
ISO 19011, ISO 17021-1 alignment, impartiality, objectivity
Risk assessment and impact analysis
evaluating AI risks, bias, transparency, accountability
Audit planning and preparation
building audit programmes, checklists, audit criteria and timelines
Stage 1 audit
document review of policies, procedures and readiness
Stage 2 audit
on-site or remote assessment: interviews, observation and evidence collection
Nonconformity analysis and reporting
classifying, documenting and addressing gaps
Corrective and preventive actions
follow-up and continual improvement planning
Audit communication and stakeholder engagement
presenting findings clearly to management
Mock audit and certification readiness
practice scenarios, simulations and exam prep
CERTIFICATION DETAILS
Examination and certification
| Standard | ISO/IEC 42001:2023 |
|---|---|
| Credential | GAICC Certified ISO/IEC 42001 Lead Auditor |
| Issuer | Global AI Certification Council (GAICC) |
| Exam format | 60 multiple-choice questions, online proctored |
| Exam duration | 90 minutes |
| Passing score | 70% |
| Language | English |
| Validity | 3 years |
| Renewal | 32 CPD credits |
| CPD/PDU earned | 32 on completion |
| Digital certificate and badge | Secure, verifiable and shareable |
| Eligibility | 32 contact hours of structured ISO/IEC 42001 training. The self-paced course package includes training that meets this requirement. |
HOW IT FITS
How it fits with standards you may already run
| Standard | What it governs | Relationship to ISO/IEC 42001 |
|---|---|---|
| ISO/IEC 27001 | What it governsInformation security management | Relationship to ISO/IEC 42001Shares the same management system structure. Organisations certified to 27001 usually find 42001 familiar and can reuse much of the governance scaffolding. |
| ISO 9001 | What it governsQuality management | Relationship to ISO/IEC 42001Same high-level structure. Where 9001 governs process quality, 42001 governs the behaviour and oversight of AI systems specifically. |
| ISO/IEC 27701 | What it governsPrivacy information management | Relationship to ISO/IEC 42001Overlaps where AI systems process personal data. Privacy controls and AI governance controls are complementary rather than duplicative. |
| ISO/IEC 38507 | What it governsGovernance implications of AI for the board | Relationship to ISO/IEC 42001Sets governance expectations at board level. ISO/IEC 42001 is the operational management system that delivers against them. |
INSTRUCTOR
Dr Faiz Rasool
Director at the Global AI Certification Council (GAICC) and PM Training School
A globally certified instructor in ISO/IEC, PMI®, TOGAF®, SAFe®, and Scrum.org disciplines. With over three years’ hands-on experience in ISO/IEC 42001 AI governance, he delivers training and consulting across New Zealand, Australia, Malaysia, the Philippines, and the UAE, combining high-end credentials with practical, real-world expertise and global reach.
LinkedIn — Dr Faiz Rasool (opens in a new tab)ENROL
Enrol on ISO/IEC 42001 Lead Auditor
Choose a package and enter your name and email. If you choose the membership and exam package, you must confirm you have completed the required training.
Most popular
Self-paced course package
US$698
- Video lessons included
- Learning resources
- Exam simulator access
- Examination voucher
- Certificate of completion
Membership and exam package
US$248
- Video lessons included (not included)
- Learning resources
- Exam simulator access
- Examination voucher
Membership included
FAQ
FAQ
What is the GAICC ISO/IEC 42001 Lead Auditor certification?
It is GAICC’s audit-level credential for ISO/IEC 42001:2023. A Lead Auditor plans, conducts and closes independent AI governance audits — Stage 1 document review, Stage 2 assessment, nonconformities and the report management will act on.
Who is this training for in Malaysia?
Internal and external auditors whose work now includes AI, risk and compliance managers responsible for AI ethics and controls, project leads preparing for ISO/IEC 42001 certification, and consultants supporting audit readiness.
What are the eligibility requirements?
32 contact hours of structured ISO/IEC 42001 training. The self-paced course package includes training that meets this requirement.
How is the exam set?
Sixty multiple-choice questions, sat online under proctoring, in 90 minutes. The published pass mark is 70%.
How long is the certification valid, and how do I renew it?
The credential is valid for three years. Renewal requires 32 CPD credits in that cycle, then a renewal application.
How many CPD hours will I earn?
You receive 32 CPD/PDU hours on completion of the Lead Auditor course.
What happens if I do not pass the exam?
GAICC members receive one exam voucher per certification. A further attempt after an unsuccessful first sitting requires the applicable exam fee.
What is the difference between the two packages?
The self-paced course package includes the full video course and everything needed to prepare from scratch. The membership and exam package is for candidates who have already completed their ISO/IEC 42001 training and only need the examination, membership and supporting resources.
Can I buy the exam package if I have not done the training?
No. Thirty-two contact hours of structured ISO/IEC 42001 training are required before you can sit the examination. If you have not completed it, choose the self-paced course package.
How is this different from Lead Implementer?
Lead Implementer is the four-day credential for the person who builds the Artificial Intelligence Management System. Lead Auditor is the four-day credential for the person who independently audits that system against ISO/IEC 42001 — planning the audit, collecting evidence and reporting nonconformities.
Is the GAICC certification programme CPD accredited?
The GAICC certification programme is CPD accredited.
Can I enrol a team?
Yes. Group rates apply for five or more. Contact us for a corporate quote and consolidated invoicing.
Certifying more than one person?
We handle group enrolment, consolidated billing and HRD Corp documentation.