Mastering AAISM
A complete preparation guide for the ISACA Advanced in AI Security Management (AAISM) certification — covering AI governance, risk management, and technical controls across all three exam domains.
Understanding the AAISM Certification
What AAISM is, who it's for, how the exam is structured, and how to use this guide.
1AI Governance and Program Management
Stakeholders, frameworks, regulation, strategy, policy, data lifecycle, and incident response.
2AI Risk and Opportunity Management
Risk frameworks (NIST AI RMF, EU AI Act), the AI threat landscape, and vendor/supply chain risk.
3AI Technologies and Controls
AI architecture, the AI lifecycle, data controls, privacy/ethics/safety, and security monitoring.
About this course
AAISM is ISACA's advanced credential for experienced security professionals (holding CISM or CISSP) who want to specialise in governing, managing, and controlling AI within the enterprise. This site walks through the certification itself, then each of the three exam domains — governance and program management, risk and opportunity management, and AI technologies and controls — with worked examples, exam tips, and self-test practice questions with instant feedback.
Start with Chapter 0 for the exam structure and study approach, then work through Chapters 1–3 in order. Each chapter ends with a set of practice questions — click an answer to check yourself, or use “Show Answer” to reveal the explanation directly.