AAISM exam preparation
AAISM practice for AI security decisions
CertArc gives you original AAISM scenarios and shows why the tempting options are weaker.
21-day free access after onboarding. No credit card required.
- 1,100+original practice questions
- 3domains in the ISACA outline
- 130questions free
- Coaching for the answer you picked, in AI security terms.
- Compare the answers: why each one looked right.
- The CertArc AAISM Lens maps each decision.
- Progress across all three domains.
- A calendar built to your exam date.

Practice approach
Review the AI decision, not just the security control

AAISM (Advanced in AI Security Management) is ISACA's AI security management credential, announced in August 2025 and open to active CISM or CISSP holders. The exam has 90 questions in 150 minutes across AI governance and program management, AI risk management, and AI technologies and controls. CertArc gives you original AAISM scenarios and shows why the tempting options are weaker.
AAISM questions turn on facts that only exist when AI is involved: who owns the AI use case, which stage of the model lifecycle a control belongs to, and where a person must stay in the decision.
Suppose a model passed its evaluation, but nobody owns live monitoring or the ability to override it. The stronger answer is usually a governance condition before wider release, not another technical test. CertArc's review shows the owner, the lifecycle stage and the oversight the scenario requires.
Record why you missed a question. “Answered as a technician, not an AI security manager” names one kind of error; it is not a rule that technical answers are always wrong.
Free access
What you can practise free
Full question bank: 1,100+ original AAISM practice questions. The free allowance below is a selection from that bank.
Baseline
5 guided warmup questions + 20 assessment questions.
Study sprints
One 25-question sprint in each of 3 domains.
Practice exam
One 30-question mixed practice exam.
All 25 warmup and assessment answers contribute to your personal baseline.
21-day free access after onboarding. No credit card required. Later sprints, later exams and retakes require paid access. Learning prerequisites still apply. The included practice exam is not a full-length official exam. No certification exam fee is included.
AAISM exam content
Three domains, built on the judgment you already use
AAISM builds on CISM or CISSP. Its outline covers AI Governance and Program Management (31%), AI Risk Management (31%) and AI Technologies and Controls (38%), across 13 subareas. Use ISACA's current outline to check your breadth.
DomainShare of the exam
Weights from the current ISACA AAISM exam content outline.
AAISM preparation
Turn the AAISM outline into a study loop
Start with the free diagnostic, then work through the six AI decision traps that make a weaker answer look right.
- AAISM study resourcesEvery AAISM guide, from the domains to the AI decision traps.
- Plan your AAISM studyA practical timeline to keep your preparation moving.
- Compare AAISM access plansFind the access window that fits your goals.
- ISACA certification requirementsCheck ISACA's current certification requirements.
ISACA opens the AAISM exam only to active CISM or CISSP holders. CertArc practice does not make you eligible, and a practice result does not grant the credential.

Before you start
Questions before you start
Does the warmup count toward my baseline?
Yes. All five warmup and twenty assessment answers make up your 25-answer personal baseline.
What is included in AAISM free access?
After onboarding, the 21-day free path includes one 25-question sprint in each of the three domains and one 30-question mixed practice exam. No credit card is required. Later sprints, exams and retakes need paid access.
Are these official ISACA questions?
No. CertArc provides original practice, not recalled exam questions or official ISACA explanations.
Should I always choose the governance answer over a technical one?
No. Technical understanding often decides the question. Choose the action supported by the stated role, the owner and the lifecycle stage, not a slogan about which kind of answer wins.
Does my practice score predict a pass?
No. Review coverage, confidence and your ability to explain unfamiliar scenarios. A practice percentage does not convert to ISACA's scaled score or guarantee certification.
AAISM readiness assessment
Start with your current AAISM baseline.
25 guided questions · 21-day free access · No credit card.
- See your readiness
- Spot knowledge gaps
- Get a personalised study plan