thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

ISACA · AI & Machine Learning · Expert

ISACA AAISM (Advanced in AI Security Management) exam guide

Exam AAISM

ISACA's Advanced in AI Security Management (AAISM) validates the ability of experienced security managers to govern, assess and secure AI systems. It is an add-on credential for CISM and CISSP holders, covering AI governance and program management, AI risk management and AI technologies and controls.

Questions90
Time limitSee official page
Passing scoreSee official page
Exam fee$599 USD
Valid forSee official page
DeliveryPSI test center or remote proctored

Format: Multiple choice, computer-based. Fee note: $459 for ISACA members.

Who it's for

CISM or CISSP holders who lead security programs and now own AI security, governance or risk.

What the exam covers

AI Governance and Program Management31%
AI Risk Management31%
AI Technologies and Controls38%

Eligibility & prerequisites

Required: An active CISM or CISSP certification.

Recommended: Security management or advisory experience plus familiarity with AI systems.

Keeping it active

Maintained under ISACA's CPE policy with an annual maintenance fee; check ISACA's current requirement for this advanced credential.

Skills & careers

Skills it validates

  • Building AI security governance and policies
  • AI risk assessment and third-party AI risk
  • Securing AI data, models and pipelines
  • Controls for generative AI and agents
  • AI incident response
  • Aligning AI programs with regulations and standards

Job roles

CISOAI Security ManagerSecurity ArchitectAI Governance LeadInformation Security Manager

Where it fits in your path

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

  1. Week 1: Review the AAISM content outline and AI fundamentals (ML, LLMs, agents).
  2. Week 2: AI governance and program management: policies, roles, inventories, standards like ISO/IEC 42001 and NIST AI RMF.
  3. Week 3: AI risk management: threat modeling AI, vendor AI risk, impact assessments.
  4. Week 4-5: AI technologies and controls (38%): data and model security, guardrails, monitoring, adversarial attacks.
  5. Week 6: ISACA practice questions and review.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam-day tips

  • AI technologies and controls is the largest domain at 38%.
  • Answer from a security manager's perspective, consistent with CISM-style reasoning.
  • Know common AI attacks and the governing control for each.
  • Expect questions on AI asset inventories and acceptable use policies.
  • Know how AI risk ties into existing enterprise risk processes.

Key terms for this exam

All 23 terms Study with thinQcards™

Commonly confused on this exam

Frequently asked questions

How much does AAISM cost?

$459 for ISACA members and $599 for non-members.

What are the prerequisites for AAISM?

You must hold an active CISM or CISSP.

How many questions are on AAISM?

90 questions.

AAISM vs AIGP?

AAISM focuses on AI security management for security leaders; IAPP's AIGP focuses on AI governance and law.

AAISM vs SecAI+?

SecAI+ is technical with no prerequisite; AAISM is managerial and requires CISM or CISSP.

Official page: www.isaca.org. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.