Skip to content

ISACA AAISM (Advanced in AI Security Management) Fact Sheet

Exam Overview

Exam Code: AAISM Exam Name: ISACA Advanced in AI Security Management (AAISM) Level: Advanced (add-on to CISM or CISSP) Duration: 2.5 hours (150 minutes) Questions: 90 multiple-choice Passing Score: 450 on a scaled 200-800 score (scored and pretest items; no penalty for wrong answers) Cost: US$459 ISACA member / US$599 nonmember exam registration, plus a one-time US$50 application processing fee (ISACA candidate guide and certification page, checked 2026-11-07) Valid For: Maintained annually: 10 CPE hours a year (30 over a 3-year period), annual maintenance fee US$20 member / US$35 nonmember (ISACA maintenance page, checked 2026-11-07; whether proof of an active CISM or CISSP is also checked at maintenance was not stated there, not verified) Delivery: Computer-based at PSI testing centers or remotely proctored Languages: English, Spanish and Japanese Prerequisites: An active CISM or CISSP (ISC2) credential to be certified. No separate work-experience requirement is listed. The exam can be taken within a six-month eligibility window from registration, and candidates have five years from passing to apply for certification Content outline: AAISM Examination Content Outline (the "June 2025" date used earlier is not stated on the outline page or candidate guide read 2026-11-07; the candidate guide is © 2025 ISACA and the page © 2026)

Verify before booking. Everything above was read from ISACA's pages and exam candidate guide on 2026-11-07. Prices change; confirm on the registration page.

📖 ISACA AAISM certification page - name, prerequisite, price, eligibility window 📖 AAISM exam content outline - domains, weights and the 22 tasks 📖 AAISM exam candidate guide (PDF) - length, languages, scoring, retake policy, certification steps 📖 Get AAISM certified - requirements and application fee 📖 Maintain AAISM certification - CPE and maintenance fee

Retake policy (candidate guide): four attempts within a rolling 12 months; wait 30 days after the first attempt, then 90 days between later attempts; the full fee is paid for each attempt.

Who it is for

Security professionals who already hold CISM or CISSP and now own the security of AI systems: securing enterprise AI solutions and using AI to improve security operations (ISACA's description). Pairs with CISM and ISC2 CISSP.

Exam Domains

Domain Weight Notes
1. AI Governance and Program Management 31% 01
2. AI Risk and Opportunity Management 31% 02
3. AI Technologies and Controls 38% 03

ISACA's candidate guide titles Domain 2 "AI Risk and Opportunity Management"; the outline web page shortens it to "AI Risk Management". The weights are the same.

Domain 1 (31%)

1A stakeholder considerations, industry frameworks and regulatory requirements; 1B AI-related strategies, policies and procedures; 1C AI asset and data life cycle management; 1D AI security program development and management; 1E business continuity and incident response.

Domain 2 (31%)

2A AI risk assessment, thresholds and treatment; 2B AI threat and vulnerability management; 2C AI vendor and supply chain management.

Domain 3 (38%)

3A AI security architecture and design; 3B AI life cycle (for example model selection, training and validation); 3C data management controls; 3D privacy, ethical, trust and safety controls; 3E security controls and monitoring.