Last updated:
AAISM preparation guide
AAISM exam tips: read the AI scenario like a security manager
Direct answer
AAISM gives you 90 questions in 150 minutes, an average of 100 seconds each. When two options both sound responsible, ask which stage of the AI life cycle the scenario is in, who owns the decision, and what evidence already exists. The weaker option often acts at the wrong stage, for the wrong owner, or on evidence that doesn't fit the intended use.
These are CertArc study strategies, not ISACA rules, and they don't predict a result.
Start AAISM baselineSix AI decision traps
| Trap | Why it feels right | What the stronger answer does |
|---|---|---|
| Right control, wrong stage | The option names a good control | Puts the control at the stage the scenario is in: design, data, training, validation, deployment or monitoring |
| “The vendor handles it” | The vendor is reputable and shares results | Keeps accountability with the deploying organization and asks for evidence that fits its own use |
| A human in the loop as the fix | Human review sounds safe | Checks that reviewers have the authority, time and information to override |
| Prompt injection vs data poisoning | Both corrupt what the model does | Matches the control to where the attacker acts: input at use, or training data |
| Monitoring later | Launch checks passed | Names owners and thresholds for drift and misuse before go-live |
| Validation that doesn't fit the use | The accuracy figure looks strong | Asks whether the test data and measure match the real use and conditions |
Original teaching example
One of the ten free AAISM practice questions: a satellite-imagery reseller integrated a downloaded pretrained classifier. Since integration, ordinary images are misclassified, and crafted images induce similar errors. The prior in-house classifier remains runnable, and you may test both classifiers in isolation. Which action best distinguishes an imported-component problem from inference-time evasion?
Before choosing a control, find where the problem comes from. Running both classifiers in isolation on identical ordinary and crafted image sets gives a like-for-like comparison: how the imported classifier does on ordinary images against the in-house baseline, and how much the crafted images add to each one's errors. A drop on ordinary images against the in-house baseline is the clearest sign of an imported-component problem; crafted images that fool only one model can still be evasion aimed at that model. Retraining or filtering inputs first would act before the cause is known.
Pace: 100 seconds is an average
It is not a limit on each question.
Answer the questions you are sure of and move on. When you have narrowed it to two, find the fact that separates them; CertArc's miss reason for this is “Narrowed to two; missed the deciding fact”.
Qualifiers: FIRST, NEXT, BEST, MOST
On a FIRST question, several options may be right eventually.
Find which prerequisite is still missing in the scenario. On a BEST question, compare how fully each option meets the stated goal.
Answer as the AI security manager
Ownership and governance often decide the answer, but not always.
“Answered as a technician, not an AI security manager” names one kind of miss; it is not a rule that technical answers are always wrong. Domain 3 is 38% of the exam, and some questions turn on a specific control.
Exam day
Bring identification that matches your registration name.
ISACA's candidate guide sets the identification rules. You can reschedule without penalty up to 48 hours before your appointment.
The last week
Mixed timed sets and review, not new material.
Review every miss by its reason, and keep all three domains in rotation rather than drilling only the weakest.
Sources and fact check
Source checked: 2026-10-12
- Study methods and examples are independent CertArc teaching guidance. ISACA's pages are the authority for exam rules and fees, which can change.
- Practice results do not convert to an official score or guarantee a pass. CertArc is not affiliated with or endorsed by ISACA.
Frequently asked questions
How many questions are on the AAISM exam?
90 multiple-choice questions in 150 minutes.
How hard is AAISM?
ISACA's AAISM pages and candidate guide give no pass rate. The candidate guide asks you to choose the correct or best answer from the options, and Domain 3 adds AI technologies and controls on top of manager judgment.
Is there a penalty for guessing?
ISACA scores the number answered correctly, so answer every question.
Can I reschedule my exam?
Yes, without penalty, up to 48 hours before your appointment and within your eligibility period.
Where can I see an AAISM-style question?
ISACA's free 12-question quiz and CertArc's ten free practice questions both show worked examples.
