ISACA Advanced in AI Security Management (AAISM):
Training and Practice Tests
ISACA Advanced in AI Security Management (AAISM) is a certification that proves you can identify, assess, monitor and mitigate the risk of enterprise AI solutions and put policy in place for responsible AI use. It’s built for experienced security professionals: ISACA requires an active CISM or CISSP certification to take the exam.
The AAISM exam has 90 questions across three domains. Total Seminars offers the video training and practice tests that get you ready to certify.
ISACA AAISM Exam Details
AAISM Exam Facts at a glance
| Required exam: | ISACA AAISM |
|---|---|
| Prerequisite: | An active CISM or CISSP certification |
| Exam fees: | US$459 for ISACA members and US$599 for non-members, as of October 2026 |
| Number of questions: | 90 questions |
| Type of questions: | Multiple choice, scenario-based |
| Length of test: | 150 minutes |
| Passing score: | 450 on a scale of 200–800 |
| Testing options: | PSI testing center or remotely proctored |
| Eligibility window: | Six months from the date you register |
| Recommended experience: | Proven experience in security or advisory roles and some expertise in assessing, implementing and maintaining AI systems |
| Domains AAISM: |
|
What the AAISM exam covers
The AAISM exam tests whether you can govern, manage and secure AI across an enterprise. ISACA’s exam content outline spans three domains:
- AI governance and program management (31%): Work with stakeholders, industry frameworks and regulatory requirements, set AI strategies, policies and procedures, manage AI assets and data through their life cycle, build and run the AI security program, and plan for business continuity and incident response.
- AI risk management (31%): Assess AI risk, set thresholds and choose treatments, manage AI threats and vulnerabilities, and oversee AI vendors and the supply chain.
- AI technologies and controls (38%): Design AI security architecture, secure the AI life cycle from model selection through training and validation, and apply data management controls, privacy, ethical, trust and safety controls, and security monitoring.
Where to focus: AI Technologies and Controls is the heaviest domain at 38%. The other two carry 31% each, so there is no domain you can afford to skip.
Exam Format, Scoring and Career Path
Question format and style: You get 90 questions and 150 minutes, which works out to 100 seconds per question. ISACA organizes the exam around three job practice domains and 22 supporting tasks. Every question is multiple choice. The questions are scenario-based and test judgment and application, and the right choice often turns on a qualifier in the question.
How registration works: A few things are worth knowing before you book:
- You can register at any time. Registration is continuous, and your eligibility lasts six months from the date you register.
- You choose where to test. ISACA offers the exam at PSI testing centers and by remote proctoring. Candidates in India, Mainland China and Hong Kong must use a testing center.
- Scheduling is flexible. You can book an appointment as early as 48 hours after you pay and up to 90 days ahead, and reschedule free of charge up to 48 hours before your appointment.
- Passing is not the last step. To be certified you apply within five years of passing, pay a US$50 application processing fee and agree to ISACA’s Code of Professional Ethics and continuing education policy.
Where AAISM Can Take You
ISACA describes AAISM as the first and only AI-centric security management certification. It builds on a CISM or CISSP instead of replacing it, adding AI-specific governance, risk and control skills to the security leadership you already have.
It’s a strong fit for information security managers, AI security managers, AI governance leads and security architects, and for governance, risk and compliance leads who advise on enterprise AI adoption.
Prepare for the AAISM Exam with Total Seminars Training
Ready to lead AI security? Total Seminars’ AAISM video course prepares you for the ISACA AAISM exam by following the full AI security life cycle, from governance strategy to continuous control monitoring.
Learn from an instructor who holds the certification
Your instructor, Michael G. Solomon, PhD, AAISM, CISSP, PMP, is a cybersecurity, privacy and emerging technologies consultant and author. He brings more than 30 years of experience in security, privacy, blockchain and data science, and he teaches as a professor in the School of Computer Information Sciences at the University of the Cumberlands.
Everything the AAISM exam covers
- More than 6 hours of video across 6 chapters and 47 lessons, mapped to ISACA’s AAISM (2025) exam objectives
- An introduction to the exam before the course moves into governance, risk and controls
- Online access through the Total Seminars Training Hub, with a single-user license and a full year of access on any device
Know you’re ready before you book
Pair the course with TotalTester practice tests and get 180 practice questions, each with hints, study references and explanations. AAISM is a new credential and study material is still limited, so realistic practice questions are a useful check on your readiness. You can also get both in the TotalVideo and TotalTester bundle.
Master the work AI security leaders do
The course covers the decisions you’ll be asked to make on the exam and on the job:
- Governance: centralized, federated and hybrid AI governance models and board-level accountability
- Policy: AI-specific security policies, standards and acceptable use guidelines
- Risk: AI risk assessment, thresholds and treatment
- Third parties: vendor oversight for AI services and third-party models
- Operations: incident response, responsible AI practices and continuous control monitoring
A credential for security leaders who now own AI risk
AAISM shows you can assess and control AI-specific risk and turn it into decisions that executives, boards and legal teams can act on. If your organization is adopting AI and looking to its security function for answers, this is the credential that speaks to that work.
Start your AAISM prep today and learn with the experts at Total Seminars.
-
-
-
Bundle
Advanced in AI Security Management TotalVideo & TotalTester
Practice Exam · Video
$268.00 View product
Featured Article
Is AAISM right for you?
Who the AAISM exam was written for, and how your background shapes the challenge.
AAISM is a specialization, not a starting point. ISACA built it for experienced IT professionals who want to add AI-specific skills to a security management credential they already hold.
The entry requirement is firm: ISACA says AAISM candidates must hold an active CISM or CISSP certification. ISACA also looks for proven experience in security or advisory roles and some expertise in assessing, implementing and maintaining AI systems.
How your background shapes the challenge
If you hold CISM, governance, risk and program management are home ground. Your study time goes to the technology side, such as AI security architecture and the AI life cycle.
If you hold CISSP, architecture and control thinking carry over. Plan extra time for AI governance, policy and regulatory requirements.
If you already work with AI systems, the technology will be familiar. Focus on how ISACA frames risk assessment, vendor oversight and program management.
If you hold neither certification, you can’t take the exam yet. A certification such as CompTIA SecAI+ or CompTIA SecurityX may be a better next step while you work toward CISM or CISSP.
Short on AI experience? Build it while you study
Look for AI governance work inside your own organization. Inventory the AI systems and data in use, read the terms for an AI service you already buy, draft an acceptable use guideline and walk through how you would handle an AI-related incident. ISACA also offers a free 12-question practice quiz on its AAISM page.
How Hard Is the ISACA AAISM Exam?
AAISM tests whether you can manage AI security risk across an enterprise, not just define AI terms. Here are the three things that make it hard and how to know you’re ready.
AAISM is written for people who already hold CISM or CISSP, so it assumes you know security management and tests how you apply it to AI. That’s what makes it demanding. It’s also why it means something to employers who need that skill.
Demanding doesn’t mean out of reach. ISACA publishes the exam content outline, with three domains and 22 supporting tasks, so you know what you’ll be asked to do.
The three things that make it hard
1. It assumes the fundamentals. With CISM or CISSP required, the outline goes straight to AI-specific governance, risk and controls. There is no warm-up on basic security concepts.
2. It spans management and technology. The same exam covers governance charters and regulatory requirements on one side and model training, validation and data controls on the other. Most people are stronger in one than the other.
3. The field is new. AAISM is a recent credential, so there is less study material and less shared experience to draw on than with long-established certifications.
How to know you’re ready
- You can speak to every supporting task, tying each one to work you’ve done or could explain to a colleague.
- You can brief a non-technical leader, describing an AI risk and recommending how to treat it.
- Your practice test scores hold steady across all three domains, not just the one you know best.
The video course and TotalTester practice tests on this page are built to help you get there.
ISACA AAISM FAQs
What is the ISACA AAISM certification?
AAISM stands for Advanced in AI Security Management. According to ISACA, it validates your ability to identify, assess, monitor and mitigate risk associated with enterprise AI solutions and to implement policy for responsible AI use.
Do I need another certification before taking the AAISM exam?
Yes. ISACA says AAISM candidates must hold an active CISM or CISSP certification.
What is on the AAISM exam?
According to ISACA, the AAISM exam covers three domains: AI Governance and Program Management (31%), AI Risk Management (31%) and AI Technologies and Controls (38%). AI Technologies and Controls is the heaviest domain.
How long is the AAISM exam and what score do I need to pass?
You get 150 minutes for 90 questions, and you need 450 on a scale of 200–800 to pass. The questions span ISACA’s three job practice domains.
What types of questions are on the AAISM exam?
The AAISM exam uses multiple-choice questions. They are scenario-based and test judgment and application, and the right choice often turns on a qualifier in the question.
Is the AAISM exam hard?
AAISM is challenging because it assumes you already know security management and tests how you apply it to AI. It covers both management topics, such as governance and regulatory requirements, and technology topics, such as the AI life cycle and data controls. Practice questions across all three domains are the best check on your readiness.
How much does the AAISM exam cost?
According to ISACA, the AAISM exam costs US$459 for ISACA members and US$599 for non-members as of October 2026. After you pass, ISACA charges a US$50 application processing fee to become certified.
Where can I take the AAISM exam?
ISACA offers the AAISM exam at PSI testing centers and as a remotely proctored exam. Candidates in India, Mainland China and Hong Kong must test at a testing center.
How long do I have to take the AAISM exam after I register?
According to ISACA, your eligibility lasts six months from the date you register. You can schedule an appointment as early as 48 hours after you pay and up to 90 days in advance.
What jobs does AAISM lead to?
AAISM suits roles such as information security manager, AI security manager, AI governance lead and security architect. It also fits governance, risk and compliance leads who advise on enterprise AI adoption.
Can I study for AAISM entirely online?
Yes. Total Seminars’ AAISM video course and TotalTester practice tests are delivered online through the Total Seminars Training Hub. The video course plays on any device with a browser, and TotalTester runs on Windows, macOS, Chrome OS and Linux (iOS and Android are not supported).
ISACA®, CISM®, and AAISM™ are trademarks of ISACA. Total Seminars is not affiliated with or endorsed by ISACA.