ISACA AAIA Study Plan¶

Four weeks at 6-8 hours a week for someone who already works in IT audit. Study against the current outline. Domain 2 is 46%, so it gets the most time.

Week 1: Governance and risk (Domain 1, 33%)¶

• Read notes/01-ai-governance-and-risk.md
• Skim the NIST AI RMF GOVERN and MAP functions and the EU AI Act risk tiers
• List what an auditor would ask for to confirm AI ownership and accountability

Week 2: AI operations part 1 (Domain 2, 46%)¶

• Read the first half of notes/02-ai-operations.md (2A to 2D)
• Draw the AI solution life cycle and mark where a control and an audit test belong

Week 3: AI operations part 2 and audit techniques¶

• Read the second half of note 02 (2E to 2G) and notes/03-ai-auditing-tools-and-techniques.md
• Write a short audit test plan for one control, with sample size reasoning

Week 4: Practice and review¶

• Work through the practice questions; read every explanation
• Re-read the notes for any domain below 70%
• Work through the scenarios

Readiness check¶

You are ready when you can explain, without notes, the difference between: design and operating effectiveness, a control and a control objective, statistical and judgmental sampling, validation and verification, and model drift and data drift.