AAISM is ISACA's advanced certification for security managers dealing with artificial intelligence. It is open to holders of an active CISM or CISSP and covers AI program governance, AI risk management and technical controls. Over three days we work through the three exam domains using real-world enterprise AI deployment cases. The course builds on what you already know as a security manager and focuses on what AI really changes: new assets, new threats and new accountabilities.
The essentials
Publisher : ISACA
Certification : AAISM – Advanced in AI Security Management
Duration : 3 days (21 h); condensed 2-day format available
Level : Expert
Formats : Live virtual class · In-person in Casablanca · On-site (intra-company)
Languages : French or English
Exam facts : 90 multiple-choice questions · 3 domains · PSI test center or remote proctoring
Exam voucher: included or optional depending on the package — contact us.
Advise leadership on AI security policy and strategy.
Build regulatory requirements and relevant frameworks into AI programs.
Manage AI assets and data across their lifecycle.
Assess and treat AI-specific risks, threats and vulnerabilities, including in the supply chain.
Design security architecture and controls suited to AI systems.
Address privacy, ethics, trust and safety in AI systems.
Monitor AI systems in production and respond to incidents affecting them.
Program
Domain 1 – AI governance and program management (31%)
Stakeholders, frameworks and regulation
Strategy, policies and procedures
Asset and data lifecycle
Business continuity and incident response
Domain 2 – AI risk management (31%)
Risk assessment and treatment
Threat and vulnerability management
Vendor and supply chain management
Domain 3 – AI technologies and controls (38%)
Secure architecture and design
AI lifecycle processes
Data, privacy and ethics controls
Security controls and monitoring
Prerequisites
Hold an active CISM or CISSP: ISACA requires it to award AAISM.
ISACA also expects proven experience in security or advisory roles and some hands-on exposure to implementing AI systems.
Basic knowledge of how AI models work is useful; it is refreshed at the start of the course.
Target audience
CISOs and security managers holding CISM or CISSP
AI program leads responsible for security
Security and AI governance consultants
Security architects and risk managers involved in AI projects
The exam
The AAISM exam has 90 multiple-choice questions across three domains. It is computer-based, at a PSI test center or remotely proctored, with registration open year-round; you then have six months to sit the exam. After passing you have five years to apply, provided you hold an active CISM or CISSP. Maintenance requires ten CPE hours a year dedicated to AI, which can also count towards your other ISACA credentials.
Preparation tips
Domain 3 is worth 38%: review AI-specific technical controls.
Lean on your CISM or CISSP reflexes: the right answer serves governance and the business.
Keep up with AI regulation, which often features in scenarios.
Frequently asked questions (FAQ)
Can I take AAISM without CISM or CISSP?
You can prepare, but the certification is only awarded to holders of an active CISM or CISSP. Make sure your base certification stays active throughout the process.
How many questions are on the exam?
90 multiple-choice questions, split 31%, 31% and 38% across the three domains. The technologies and controls domain is therefore the heaviest.
How does AAISM differ from SecAI+?
CompTIA SecAI+ is hands-on and technical. AAISM targets leadership: governance, risk and management trade-offs. The two can complement each other within the same team.
What are the ongoing requirements?
Ten CPE hours a year in AI, compliance with ISACA's code of ethics, and keeping your CISM or CISSP active. Those hours can also count towards your other ISACA certifications.
Is the course available online or in Casablanca?
Both: as a live online class, in person in Casablanca, or on-site at your organization, taught in French or English.