Last updated:
AAIA preparation guide
Build an AAIA study plan around the outline and your gaps
Direct answer
ISACA publishes no recommended study time for AAIA, so plan from the outline and your gaps rather than an hours figure. Cover all 17 subareas, give AI Operations the most time because it is 46% of the exam, and schedule review of every miss. Book the exam once your mixed practice holds up across domains, inside the six-month window that registration starts.
CertArc's AAIA route has 6 25-question study sprints per domain (two foundation, two application, two mastery) and 30-question mixed practice exams. Your calendar spreads them to your exam date.
Coming from CISA, you may move through audit planning, sampling and reporting quickly and need more time on how AI systems are built, tested and attacked. Let your results, not the order of the outline, decide where extra time goes.
Start AAIA baselineAn eight-week plan (an example, not a norm)
| Weeks | Focus | Evidence to move on |
|---|---|---|
| Week 1 | Read the outline, take a baseline, list your weakest subareas | A named starting gap, not only a score |
| Weeks 2–4 | AI Operations (2A–2G), one or two subareas at a time | You can say what evidence shows each AI control works |
| Weeks 5–6 | AI Governance and Risk (1A–1E) | You can name who owns each AI decision and risk |
| Week 7 | AI Auditing Tools and Techniques (3A–3E), including AI inside the audit | You can plan, sample and report on an AI system |
| Week 8 | Mixed timed practice and review | Your reasoning holds across domains at the exam pace |
Original teaching example
You have five weeks and four evenings a week. Your baseline shows strong audit planning and reporting, but you missed questions on monitoring model drift and on testing a model before release.
Give the first two weeks to 2D (supervision of AI solutions) and 2E (testing techniques for AI solutions), with a focused sprint after each, then cover the rest of the outline before mixed practice in the last week. This is a planning example, not a required schedule.
Before you start
Confirm your eligibility, then read the outline and the candidate guide.
Check that your qualifying credential is active. Registration starts a six-month window and fees are non-refundable, so plan first and register when you can name a target date. Appointments open 90 days ahead and can be booked from 48 hours after payment.
Weight by domain, keep the coverage
AI Operations carries 46%, AI Governance and Risk 33% and AI Auditing Tools and Techniques 21%.
Every domain is tested and the score counts every answer, so cover all 17 subareas. Give extra time where your results show gaps, not only where the weight is highest.
Practice and review loop
Practise, review every option, record why you missed, then go back to the subarea.
Tag each miss with a reason. Reasons such as “Answered as management, not as an auditor” or “Narrowed to two; missed the deciding evidence” show whether the gap is AI knowledge or audit judgment, and each needs different study.
Where to start, by background
Start where your experience helps least, then keep all three domains covered.
Let your baseline overrule these starting points if it shows a different gap.
- CISA holder: AI Operations, especially data management, testing, and threats specific to AI (2A, 2E, 2F).
- CIA or accountant in IT audit: AI Operations, then Domain 3's audit techniques as they apply to AI systems.
- Auditor already working with AI models: Domain 1 governance and the auditor's role, then mixed practice.
The final week
Mixed timed sets and review, not new material.
Practise at the exam pace of about 100 seconds a question and read ISACA's exam-day rules. Keep all three domains in rotation rather than drilling only the weakest.
Sources and fact check
Source checked: 2026-10-17
- Study methods and examples are independent CertArc teaching guidance. ISACA's pages are the authority for exam rules and fees, which can change.
- Practice results do not convert to an official score or guarantee a pass. CertArc is not affiliated with or endorsed by ISACA.
Frequently asked questions
How long should I study for AAIA?
There is no single answer, and ISACA publishes no study-hour figure. Plan from the outline and your baseline gaps, and adjust as practice results come in.
Do I need the AAIA Review Manual?
ISACA sells it as optional prep. The outline is the coverage checklist; use the manual or other sources to learn concepts you're missing.
Should I study only my weakest domain?
No. Give it extra time and keep all three covered, because every answer counts toward the score.
When should I register for AAIA?
When you can name a target date. Registration starts a six-month window, and exam fees are non-refundable.
How should a CISA holder use their audit experience?
Rely on it for planning, sampling, evidence and reporting, then spend the time saved on AI Operations.
