Last updated:
AAIA preparation guide
Is AAIA worth it? A decision for IT auditors and advisors
Direct answer
AAIA is worth considering if you hold an active CISA, or a listed audit or accounting designation, and AI systems are already in your audit or advisory scope. ISACA built it for experienced IT auditors and advisors and for people who assess, implement, maintain or audit AI systems. If AI won't be in your work soon, or you don't yet hold a qualifying credential, wait.
CertArc doesn't publish AAIA salary figures. ISACA's AAIA pages give no pay data for AAIA holders, and figures quoted elsewhere are not ISACA's.
The required cost is US$509 for an ISACA member or US$649 for a non-member to sit and apply, then US$20 or US$35 a year and at least 10 hours of AI CPE.
Start AAIA baselineIs AAIA a good next step for you?
| You hold | Your work | Fit |
|---|---|---|
| Active CISA | IT audit, with AI systems in scope now or soon | Strong: AAIA applies the audit judgment you already use to AI systems |
| CIA, or a listed accounting designation | IT audit or IT advisory | Eligible while you work in that role; the same fit questions apply |
| The same designations | Financial audit only, with no IT audit or advisory role | Not eligible until your role includes IT audit or IT advisory |
| CISA exam passed, certification pending | IT audit | Wait: ISACA asks for an active CISA certification; check with ISACA |
| CISA, mainly assessing AI risk | Assessing and reporting AI risk rather than auditing it | Compare with AAIR, which also accepts CISA holders |
| CISA, no AI in scope | No AI systems to audit in the next year | Not yet: you would study and keep AI CPE without using it at work |
| CISM or CISSP, no audit designation | Securing or managing AI systems | Look at AAISM; AAIA needs CISA or a listed designation |
Original teaching example
A retail bank's internal audit team, led by a CISA holder, has two AI systems in next year's audit plan: a vendor chatbot and an in-house credit model. The audit committee asks whether the team can give assurance on both.
Here AAIA lines up with real work: planning an audit of an AI system, choosing evidence such as validation reports, data lineage and override logs, and reporting findings to the committee. The credential doesn't create that ability; the work does. AAIA is a way to have ISACA examine that judgment.
Who ISACA built AAIA for
Experienced IT auditors and advisors, people who assess, implement, maintain or audit AI systems, and active holders of a prerequisite designation.
ISACA calls AAIA the world's first advanced AI audit certification. Its outline pairs AI subject matter (governance, risk, data, life cycle, supervision, testing, threats and incidents) with audit work.
When AAIA fits your work
When you already plan, test or report on AI systems, or will soon.
Audit plans that include AI models, AI vendors or AI tools used inside the audit are the clearest fit. Supporting tasks 1 and 2 cover AI inside the audit process itself, which also matters to audit teams adopting AI tools.
When to wait
When your qualifying credential isn't active yet, or no AI system will be in your scope soon.
If you hold no listed designation, start with CISA. Without AI work to apply it to, the annual AI CPE becomes a cost without a use.
What it costs to keep
US$20 or US$35 a year, 10 AI CPE hours a year and 30 over three years, and an active qualifying credential.
One maintenance fee covers every ISACA Advanced credential you hold. ISACA revokes AAIA if its certification requirements are not met.
What no one can tell you yet
Salary effects, employer demand by name, or a pass rate.
ISACA publishes no AAIA pass rate and no AAIA salary data. Check job postings in your own market before assuming employers ask for AAIA by name. Pass stories and forum threads help with logistics; check any exam fact against ISACA's pages.
Sources and fact check
Source checked: 2026-10-17
- Study methods and examples are independent CertArc teaching guidance. ISACA's pages are the authority for exam rules and fees, which can change.
- Practice results do not convert to an official score or guarantee a pass. CertArc is not affiliated with or endorsed by ISACA.
Frequently asked questions
Does AAIA raise salary?
ISACA's AAIA pages give no salary figure for holders, so CertArc publishes none.
Is AAIA recognized?
ISACA describes AAIA as the world's first advanced AI audit certification. Check employer demand in your own market.
Is AAIA worth it without CISA?
If you hold a listed designation such as CIA or ACCA and work in IT audit or IT advisory, you qualify, and the same fit questions apply.
AAIA or AAIR?
Both accept CISA holders. Choose AAIA if you test and report on AI systems, and AAIR if you mainly assess and manage AI risk.
How long does AAIA take to prepare for?
It depends on your starting point and the time you can protect. ISACA publishes no study-hour figure; let a baseline set the plan.
