thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

ISACA · AI & Machine Learning · Expert

ISACA AAIR (Advanced in AI Risk) exam guide

Exam AAIR

ISACA's Advanced in AI Risk (AAIR) validates the ability of experienced risk professionals to govern and manage AI risk across the AI life cycle. It is an advanced add-on credential open to holders of qualifying ISACA and other risk, audit and security designations.

Questions90
Time limitSee official page
Passing scoreSee official page
Exam fee$599 USD
Valid forSee official page
DeliveryPSI test center or remote proctored

Format: Multiple choice, computer-based. Fee note: $459 for ISACA members; $50 application fee.

Who it's for

Risk managers, GRC leads and advisors with an existing risk or audit credential who are responsible for AI risk.

What the exam covers

AI Risk Governance and Framework Integration37%
AI Life Cycle Risk Management21%
AI Risk Program Management42%

Eligibility & prerequisites

Required: One qualifying designation, such as CISA, CISM, CRISC, CGEIT, CDPSE, CGRC, CISSP, CIA, a CPA/CA designation or PMI-RMP, plus experience in IT risk or advisory roles.

Recommended: IT or enterprise risk management experience plus familiarity with AI systems.

Keeping it active

Maintained under ISACA's CPE policy with an annual maintenance fee; check ISACA's current requirement for this advanced credential.

Skills & careers

Skills it validates

  • Integrating AI risk into enterprise risk frameworks
  • Assessing risk across the AI life cycle
  • Running an AI risk program and metrics
  • Third-party and generative AI risk
  • Regulatory alignment for AI
  • Reporting AI risk to leadership

Job roles

AI Risk ManagerIT Risk ManagerGRC LeadChief Risk OfficerRisk Consultant

Where it fits in your path

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

  1. Week 1: AI basics and the AAIR content outline.
  2. Week 2-3: AI risk governance and framework integration (37%): NIST AI RMF, ISO/IEC 42001 and 23894, EU AI Act basics.
  3. Week 4: AI life cycle risk management: data, model, deployment and monitoring risks.
  4. Week 5: AI risk program management (42%): roles, metrics, reporting, vendor AI risk.
  5. Week 6: ISACA practice questions.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam-day tips

  • AI risk program management is the largest domain at 42%.
  • Tie every AI risk answer back to enterprise risk appetite and governance.
  • Know the AI life cycle stages and their typical risks.
  • Expect questions on third-party and generative AI risks.
  • Use CRISC-style reasoning on risk ownership and response.

Key terms for this exam

All 27 terms Study with thinQcards™

Commonly confused on this exam

Frequently asked questions

How much does AAIR cost?

$459 for ISACA members and $599 for non-members, plus a $50 application fee.

Who can take AAIR?

Holders of qualifying designations such as CRISC, CISA, CISM, CGEIT, CDPSE, CGRC, CISSP, CIA or PMI-RMP.

How many questions are on AAIR?

90 questions.

AAIR vs CRISC?

CRISC covers IT risk broadly; AAIR focuses on AI-specific risk and builds on an existing credential.

Is AAIR worth it?

It suits risk professionals whose organizations are scaling AI under new regulations.

Official page: www.isaca.org. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.