Skip to content

ISACA AAIA (Advanced in AI Audit) Fact Sheet

Exam Overview

Exam Code: AAIA Exam Name: ISACA Advanced in AI Audit (AAIA) Level: Advanced (add-on to CISA or an equivalent audit credential) Duration: 2.5 hours (150 minutes) Questions: 90 multiple-choice Passing Score: 450 on a scaled 200-800 score (scored and pretest items) Cost: US$459 ISACA member / US$599 nonmember exam registration, plus a one-time US$50 application processing fee (ISACA certification page and candidate guide, checked 2026-11-07) Valid For: Maintained annually: 10 CPE hours a year (30 over 3 years), annual maintenance fee US$20 member / US$35 nonmember, and an active prerequisite credential (ISACA maintenance page, checked 2026-11-07) Delivery: Computer-based at PSI testing centers or remotely proctored (remote-proctoring country restrictions not verified; see ISACA's Remote Proctoring Guide) Languages: English, Simplified Chinese, Spanish and Japanese Prerequisites: An active CISA to be certified, or one of the qualifying credentials the candidate guide lists (for example CIA, US CPA, ACCA, ICAEW) together with an IT audit or IT advisory role. No separate work-experience requirement is listed. Six-month exam eligibility window from registration; five years from passing to apply for certification Content outline: AAIA Examination Content Outline (ISACA's page shows no version date; earlier notes said June 2025, not confirmed)

Verify before booking. Everything above was read from ISACA's pages and candidate guide on 2026-11-07. Confirm prices and the qualifying credential list before booking.

📖 ISACA AAIA certification page - name, prices, prerequisite, eligibility windows 📖 AAIA exam content outline - domains and weights 📖 AAIA exam candidate guide (PDF) - length, languages, scoring, retakes, qualifying credentials, the 23 supporting tasks (the notes cite task numbers from the candidate guide's list, which differs from the order on the outline web page) 📖 Get AAIA certified - certification requirements and application fee 📖 Maintain AAIA certification - CPE and maintenance fee

Retake policy (candidate guide): four attempts within a rolling 12 months; wait 30 days after the first attempt and 90 days between later attempts.

Who it is for

IT audit professionals who need to provide assurance over AI-driven processes (ISACA's description) and to use AI inside the audit process. Pairs with CISA and complements AAISM on the security-management side.

Exam Domains

Domain Weight Notes
1. AI Governance and Risk 33% 01
2. AI Operations 46% 02
3. AI Auditing Tools and Techniques 21% 03

Domain 1 (33%)

1A AI models, considerations and requirements; 1B AI governance and program management; 1C AI risk management; 1D privacy and data governance programs; 1E leading practices, ethics, regulations and standards for AI.

Domain 2 (46%)

2A data management specific to AI; 2B AI solution development methodologies and life cycle; 2C change management specific to AI; 2D supervision of AI solutions (outputs, impacts and decisions); 2E testing techniques for AI solutions; 2F threats and vulnerabilities specific to AI; 2G incident response management specific to AI.

Domain 3 (21%)

3A audit planning and design; 3B audit testing and sampling methodologies; 3C audit evidence collection techniques; 3D audit data quality and data analytics; 3E AI audit outputs and reports.