Sources and Verification
A learning plan is only reliable if its recommendations are real, current, and independently verifiable. This page documents every certification, framework, and key resource referenced in the plan, with links to primary sources (universities, Microsoft, standards bodies) so anyone — or a recruiter — can confirm them directly.
Verification method
- Primary sources only — official provider pages, not blogs or aggregators.
- Record the "verified on" date — certifications and URLs change; we note when each one was confirmed.
- Separate fact from recommendation — the existence and scope of an exam is a verifiable fact; sequence and timing are judgment.
- Re-verify before every exam — Microsoft regularly renews, renames, or retires credentials.
Last verified: 2026-07-24
Certifications (current, verified)
| Certification | Code | Price (USD) | Exam language | Primary source |
|---|---|---|---|---|
| Azure Fundamentals | AZ-900 | $99 (+ taxes) | Spanish available | learn.microsoft.com |
| Security, Compliance & Identity Fundamentals | SC-900 | $99 (+ taxes) | Spanish available | learn.microsoft.com |
| Azure AI Fundamentals | AI-900 | $99 (+ taxes) | Spanish available | learn.microsoft.com |
| GitHub Foundations | GH-900 | $99 (free prep) | English | learn.microsoft.com |
| Azure AI Apps and Agents Developer Associate | AI-103 | verify on official page | Verify | learn.microsoft.com |
Microsoft retired the AI-102 exam on Jun 30, 2026. Its successor is AI-103 — Azure AI Apps and Agents Developer Associate (generative AI apps + multi-agent solutions with Microsoft Foundry, in Python). Official page: AI-103 · AI-103 study guide. Confirm status (beta/GA), price, and skills measured on the official page before scheduling.
AI-103 (Associate level) is developer-oriented for people who build AI solutions with Python and Microsoft Foundry. For this profile (IT Manager targeting AI Program Manager / AI Governance / TPM) it is optional and advanced: it is worth it only if the target includes building AI solutions with code. For governance/program roles, vendor-neutral credentials (IAPP AIGP, PMI-CPMAI) + portfolio + frameworks (NIST/ISO) usually provide more return.
Vendor-neutral certifications (verified)
This plan is not "Microsoft first." These credentials are vendor-independent and often carry more weight in AI governance, risk, and security roles. Verify price and requirements at the source before paying.
| Cert | Issuer | Prerequisite | Language | Primary source (verified 2026-07) |
|---|---|---|---|---|
| AIGP — AI Governance Professional | IAPP | None | English | iapp.org/certify/aigp |
| PMI-CPMAI — Managing AI | PMI | None | Spanish (LATAM) + 9 more | pmi.org |
| CEET — Certified Ethical Emerging Technologist | CertNexus | None | English | certnexus.com |
| AAIA — Advanced in AI Audit | ISACA | ⚠️ Requires CISA (or another equivalent audit designation) | English | isaca.org/credentialing/aaia |
| Lead Auditor ISO/IEC 42001 | Various (accredited) | None | Varies | iso.org/standard/81230 |
| CC — Certified in Cybersecurity | ISC2 | None | Spanish available | isc2.org |
| Security+ | CompTIA | None | Spanish available | comptia.org |
- ISACA AAIA requires CISA (or another accepted audit/accounting designation) as a prerequisite — confirmed on the official page. Plan CISA first if you do not already have it.
- PMI's official credential name is "PMI Certified Professional in Managing AI (PMI-CPMAI)" (previously referred to as AI Project Management).
- We could not confirm an ISACA "AAISM" credential as a separate product; only AAIA is verified. If you see "AAISM," verify it directly at isaca.org before citing it.
- Prices: vendor-neutral exams change price frequently; the ranges in the Plan Overview are directional (~AIGP $649–799, ~CPMAI $699 + membership, ~CEET $270–350, ~AAIA $459–599). Confirm at the official source.
Microsoft frequently updates skills measured, prices, and practice assessment availability. Before scheduling any exam, confirm on the official credential page: exam status, current syllabus, and whether there is a free practice assessment.
Governance and security frameworks (verified)
| Framework | Issuer | Official identifier | Primary source |
|---|---|---|---|
| AI Risk Management Framework | NIST (U.S.) | AI RMF 1.0 (NIST AI 100-1) | nist.gov |
| AI management system | ISO/IEC | ISO/IEC 42001:2023 | iso.org |
| EU AI Act | European Union | Regulation (EU) 2024/1689 | eur-lex.europa.eu |
| Zero Trust Architecture | NIST | SP 800-207 | csrc.nist.gov |
| Top 10 for LLMs | OWASP | OWASP Top 10 for LLM Apps | owasp.org |
| Threats to AI systems | MITRE | MITRE ATLAS | atlas.mitre.org |
Free and low-cost resources (trusted sources)
Verified options for building the same competencies at no cost or low cost — key for anyone in transition or career repositioning.
| Resource | Provider | Cost | Certificate | Primary source |
|---|---|---|---|---|
| Elements of AI | University of Helsinki + Reaktor | Free | Free | elementsofai.com |
| Google AI Essentials | Low cost (free Coursera audit) | Paid | grow.google/ai-essentials | |
| AI for Everyone (Andrew Ng) | DeepLearning.AI (Coursera) | Free audit | Paid | coursera.org |
| Generative AI for Everyone | DeepLearning.AI (Coursera) | Free audit | Paid | deeplearning.ai |
| AI learning paths | Microsoft Learn | Free | Free (badges/Applied Skills) | learn.microsoft.com |
| Official prep + Practice Assessments | Microsoft Learn | Free | N/A | learn.microsoft.com |
| Python para Todos (Py4E) | Univ. of Michigan (Dr. Chuck) | Free | Optional | py4e.com |
| GitHub Skills | GitHub | Free | N/A | skills.github.com |
| Anthropic Academy | Anthropic | Free | Varies | anthropic.com/learn |
AI Security — open and free tools (vendor-neutral)
Foundation of the Challenge Track: Applied AI Security. All are open source and runnable on your own machine.
| Tool / Resource | What it does | Cost | Primary source (verified 2026-07) |
|---|---|---|---|
| OWASP Top 10 for LLM Apps | The 10 security risks for LLMs | Free | genai.owasp.org |
| MITRE ATLAS | Adversarial TTPs against AI/ML systems | Free | atlas.mitre.org |
| NIST AI RMF + GenAI Profile (600-1) | AI risk management framework | Free | nist.gov · 600-1 |
| garak | LLM vulnerability scanner | Free (Apache-2.0) | github.com/NVIDIA/garak |
| PyRIT | Generative AI red-teaming toolkit | Free (MIT) | github.com/Azure/PyRIT |
| Presidio | PII detection/anonymization (DLP) | Free (MIT) | github.com/data-privacy-stack/presidio |
| OWASP Top 10:2025 | Web application security risks (SQLi, XSS, SSRF, auth, etc.) | Free | owasp.org/Top10/2025 |
| MITRE CWE Top 25 | Most dangerous software weaknesses (annually updated) | Free | cwe.mitre.org/top25 |
| Semgrep OSS | Static code analysis (SAST) for AI-generated code review | Free (LGPL 2.1) | github.com/semgrep/semgrep |
| Gitleaks | Secret scanning (hardcoded credentials/API keys) | Free (MIT) | github.com/gitleaks/gitleaks |
garak moved from leondz/garak to NVIDIA/garak. Presidio moved out of the Microsoft organization to data-privacy-stack/presidio (docs at data-privacy-stack.github.io/presidio). Always use the new URLs.
OWASP released the Top 10:2025 edition, superseding the 2021 edition (owasp.org/Top10/ now redirects to it). Category numbers shifted — e.g., SSRF is folded into A01:2025 Broken Access Control rather than standing alone as it did in 2021. Always cite the current edition and re-check category numbers before an interview or exam, since OWASP periodically renumbers.
The free stack (Elements of AI + Microsoft Learn + Py4E + GitHub Skills + official practice assessments) covers almost the whole plan at no cost. The only mandatory spend is the certification exams (~$99 each) — and Microsoft periodically offers free vouchers through Virtual Training Days. Check the Microsoft Learn events page before paying.
Product changes already reflected
Learning plans go stale when vendors rename products. These are already corrected in the plan:
| Before | Now | Note |
|---|---|---|
Azure AI Studio (/azure/ai-studio/) | Azure AI Foundry (/azure/ai-foundry/) | Renamed by Microsoft; URLs updated |
| Power BI "Guided Learning" | Modular Power BI paths | The linear path was retired |
| Google AI Essentials (old URL) | grow.google/ai-essentials/ | Current official URL |
| MeasureUp (paid practice tests) | Official Microsoft Practice Assessments (free) | Official, no-cost alternative |
Learning design frameworks and market data
Methodology and Best Practices is based on these primary sources:
| Source | What it contributes | Type | Primary source |
|---|---|---|---|
| WEF Future of Jobs Report 2025 | In-demand skills and AI transformation data (86%, 39%, ~63%) | Research report | weforum.org |
| 70-20-10 model | Experience/social/formal balance in leader development | Framework (CCL) | ccl.org |
| Dunlosky et al. (2013) | Effectiveness of active recall and spaced/retrieval practice | Peer-reviewed study | journals.sagepub.com |
| Google Career Certificates | Design with projects + capstone + employer consortium | Reference program | grow.google/certificates |
| AWS re/Start | Cohort design + scenario labs | Reference program | aws.amazon.com |
| IBM SkillsBuild | Project-based learning + stackable credentials | Reference program | skillsbuild.org |
AI labor market data (2025–2026)
Use these in cover letters and interviews to support the transition with data. They are survey and job-posting aggregate data; treat them as directional, not guarantees.
| Data point | Source | Type | Primary source |
|---|---|---|---|
| Job postings requiring AI skills pay an | Lightcast (2025) | Market report | lightcast.io |
| ~Half of postings requiring AI skills are already outside IT (HR, finance) | Indeed Hiring Lab (Jun 2025) | Market report | hiringlab.org |
| Average total compensation in AI privacy/governance ~$200k; median AI governance specialist ~$152k | IAPP (2025–26) | Survey report | iapp.org |
The figures (86% of employers expect AI transformation; 39% of core skills will change; ~63% cite the skills gap as the main barrier) come from the World Economic Forum's Future of Jobs Report 2025. They are employer survey data, not guaranteed projections. Google/AWS/IBM employment outcome percentages are reported by each provider and should be read as verifiable marketing, not independent studies.
The 70/20/10 proportions are a guiding philosophy based on research by the Center for Creative Leadership (McCall, Lombardo, and Eichinger, 1988), not a statistically validated formula. Use them as a balance guide, not an exact rule.
Microsoft Copilot Studio (verified)
Official resources and credentials for the priority Copilot Studio module in Phase 1. Copilot Studio evolves quickly (autonomous agents, generative actions); re-verify before scheduling a credential.
| Resource / Credential | Type | Cost | Primary source |
|---|---|---|---|
| Official Copilot Studio documentation | Docs | Free | learn.microsoft.com |
| Learning Path: Create agents in Microsoft Copilot Studio (9 modules) | Learning Path with labs | Free | learn.microsoft.com |
| Copilot Studio Agent Academy | Practical curriculum | Free | microsoft.github.io/agent-academy |
| Agent in a Day — Workshop | Guided workshop | Free | learn.microsoft.com |
| Applied Skill: Create agents in Microsoft Copilot Studio | Credential (interactive lab) | Free / low cost | learn.microsoft.com |
| Applied Skill: Enhance agents with autonomous capabilities | Credential (interactive lab) | Free / low cost | learn.microsoft.com |
| Copilot Studio Samples | Sample code | Free | github.com/microsoft/CopilotStudioSamples |
They are interactive lab-based credentials (not multiple-choice exams): you demonstrate the skill by performing real tasks in a sandbox environment. Both official pages were confirmed and updated by Microsoft in 2025-2026. Copilot Studio is the evolution of Power Virtual Agents.
Note about salary ranges
The salary ranges in the Plan Overview are directional (U.S. market, 2025-2026), not guarantees. They vary strongly by country, industry, company size, and seniority. For role/region-specific figures, consult live data sources such as:
- Levels.fyi — tech compensation by level and company
- Glassdoor — ranges by role and location
- Robert Half / Michael Page market reports (verify the year)
Honesty log
- Verified facts: existence, code, and language of Microsoft certifications (~$99 fundamentals); AI-102 retired on Jun 30, 2026, successor AI-103; existence and prerequisites of vendor-neutral credentials (IAPP AIGP, PMI-CPMAI — exam in LATAM Spanish —, CertNexus CEET, ISACA AAIA requires CISA); framework identifiers (NIST AI RMF 1.0, ISO/IEC 42001:2023, EU AI Act = Regulation (EU) 2024/1689, NIST SP 800-207); current locations of open tools (garak → NVIDIA/garak; Presidio → data-privacy-stack/presidio).
- Not verified / marked: we could not confirm an ISACA "AAISM" credential distinct from AAIA; paid exam prices change and are directional.
- Judgment (not fact): the phase sequence, weekly timing, and target role selection are recommendations.
- Design frameworks: the 70-20-10 model (CCL) and WEF Future of Jobs 2025 data support the methodology; the 70/20/10 proportions are a guiding philosophy, not a validated formula, and WEF statistics are survey data with year/source cited.
- Directional pending verification: salary ranges and any market statistics.
- Prices and URLs change: always confirm at the source before enrolling or scheduling an exam.