Last updated:
AAISM preparation guide
AAISM eligibility and exam format: who can sit it, fees and retakes
Direct answer
ISACA opens the AAISM exam only to active CISM or CISSP holders. The exam has 90 multiple-choice questions in 150 minutes, costs US$459 for ISACA members or US$599 for non-members, and is reported as a scaled score. After passing, you apply for certification.
Eligibility is about sitting ISACA's exam. CertArc practice is open to anyone, but it does not make you eligible, and CertArc does not check your credentials.
Check ISACA's current requirements before you book: rules and fees can change, and ISACA's own pages are the authority.
Start AAISM baselineWhat ISACA publishes
| Topic | What ISACA publishes |
|---|---|
| Who can sit the exam | Active CISM holders and CISSP holders |
| Length | 90 multiple-choice questions in 150 minutes |
| Languages | English, Spanish and Japanese |
| Where | PSI test centres or remote proctoring; some regions are test-centre only |
| Windows | Six months to sit after registering; book from 48 hours after payment, up to 90 days ahead; reschedule without penalty up to 48 hours before |
| Domains | AI Governance and Program Management 31%, AI Risk Management 31%, AI Technologies and Controls 38% |
| Fee | US$459 for members, US$599 for non-members, paid in full for each attempt |
| Retakes | Up to four attempts in 12 months: wait 30 days after the first, then 90 days after the second and third |
| Scoring | A scaled score; domain-level results are for information only |
| After you pass | Apply for certification within five years; ISACA charges a one-time US$50 application processing fee |
| Keeping it | CISM or CISSP must stay active; 10 CPE a year (in AI) and 30 over three years; US$20 or US$35 a year |
Original teaching example
Your CISSP lapses while you are preparing for AAISM, a few weeks before the exam date you planned to book.
If you hold no active CISM, bring the CISSP back to active status with ISC2 before you register: ISACA opens the exam to active holders. An active CISM alone also qualifies. Your CertArc progress is unaffected.
Pace
150 minutes for 90 questions is about 100 seconds per question, an average rather than a limit. CertArc's timed practice uses the same reference.
Practice scores don't convert
A CertArc percentage is a study signal. It does not convert to ISACA's scaled score.
Facts some guides get wrong
The exam is 150 minutes, and you get four attempts in 12 months.
Some guides say 180 minutes, three attempts or unlimited retakes. ISACA's candidate guide is the authority.
Keep your CISM or CISSP active
It matters for sitting the exam and for keeping AAISM.
ISACA opens the exam to active holders, and keeping AAISM requires proof of an active CISM or CISSP.
Sources and fact check
Source checked: 2026-10-12
- Study methods and examples are independent CertArc teaching guidance. ISACA's pages are the authority for exam rules and fees, which can change.
- Practice results do not convert to an official score or guarantee a pass. CertArc is not affiliated with or endorsed by ISACA.
Frequently asked questions
Can I study before I hold CISM or CISSP?
Yes, CertArc practice is open. ISACA's eligibility applies when you sit the exam.
Does CertArc check my credential?
No.
How soon can I retake?
30 days after a first attempt, then 90 days after the second and third, with four attempts in 12 months.
Does passing make me AAISM certified?
You also apply for certification with ISACA after passing; check its current requirements.
Can I take the exam remotely?
Yes, through PSI remote proctoring, except in regions ISACA lists as test-centre only.
