Free study guide

ISACA AAISM Study Guide

ISACA Advanced in AI Security Management (AAISM)

ISACA AAISM (Advanced in AI Security Management) is the certification for experienced security managers who govern AI and manage its security risk across the enterprise. It covers three domains: AI governance and program management, AI risk management, and AI technologies and controls. Candidates must already hold CISM or CISSP, and the exam has 90 multiple choice questions.

  • Exam code AAISM
  • 3 exam domains
  • 90 questions

This guide is free, with no sign-up. It explains every ISACA AAISM exam topic in plain English, one chapter at a time. Read them in order or jump straight to the topic you need.

  • 3chapters
  • 17topics
  • 6diagrams and exhibits
  • 1 h 31 minfast track
Start with AI Governance and Program Management
  • Every topic follows the same simple pattern: what it is, how it works, common mistakes
  • Diagrams and real command output where a picture explains it best
  • Exam tips and worked subnetting and IPv6 practice, with answers

How the exam is weighted

Each domain is worth this share of the exam, so spend your study time in proportion. Select a domain to open its chapter.

Chapters

Open a chapter to see its topics and how long each takes.

1AI Governance and Program Management6 topics · 33 min fast trackAI stakeholders, frameworks and regulation, AI policy, asset and data life cycle, the AI security program and AI incidents.
  1. 1AI Stakeholders and Industry Frameworks6 min
  2. 2AI Regulatory Requirements and the EU AI Act6 min
  3. 3AI Strategy, Charter, Policies and Procedures5 min
  4. 4AI Asset Inventory and Data Life Cycle Management5 min
  5. 5AI Security Program Development and Management5 min
  6. 6AI Incident Response and Business Continuity6 min
Read the chapter overview →
2AI Risk Management4 topics · 22 min fast trackAI risk assessment, thresholds and treatment, the AI threat landscape, testing and vulnerability management, and AI vendors.
  1. 1AI Risk Assessment, Impact Assessment and Treatment6 min
  2. 2The AI Threat Landscape5 min
  3. 3AI Testing, Red Teaming and Vulnerability Management5 min
  4. 4AI Vendor and Supply Chain Management6 min
Read the chapter overview →
3AI Technologies and Controls7 topics · 36 min fast trackAI security architecture, the AI life cycle, data controls, privacy, ethics, trust and safety, and AI controls and monitoring.
  1. 1AI Security Architecture and Design Principles6 min
  2. 2AI in Enterprise Architecture, RAG and Agents5 min
  3. 3Securing the AI Life Cycle5 min
  4. 4Data Management Controls for AI5 min
  5. 5Privacy, Ethics, Trust and Safety Controls5 min
  6. 6Designing and Reviewing AI Security Controls5 min
  7. 7AI Security Monitoring, Metrics and Tools5 min
Read the chapter overview →

Ready for more practice?

The full ISACA AAISM question bank has 747 questions, with timed practice exams and an explanation for every answer.

SubscribeTry Sample Exam

This study guide is independent and is not affiliated with, endorsed by, or sponsored by ISACA. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.