Last updated:
AAISM preparation guide
AAISM FAQ: eligibility, exam format, scoring, cost and renewal
Direct answer
AAISM is ISACA's Advanced in AI Security Management credential. The exam is open to active CISM or CISSP holders, has 90 multiple-choice questions in 150 minutes, and costs US$459 for ISACA members or US$599 for non-members. Each answer below comes from ISACA's AAISM pages or its AAISM Exam Candidate Guide, listed in the sources.
Rules and fees can change. ISACA's pages are the authority; this page was checked against them on October 12, 2026.
Start AAISM baselineAAISM at a glance (checked October 12, 2026)
| Topic | ISACA's rule |
|---|---|
| Eligibility | Active CISM or CISSP |
| Exam | 90 multiple-choice questions, 150 minutes; English, Spanish or Japanese |
| Where | PSI test centres or remote proctoring; some regions are test-centre only |
| Windows | Six months to sit after registering; book from 48 hours after payment, up to 90 days ahead |
| Score | Scaled from 200 to 800 |
| Retakes | Four attempts in 12 months, waiting 30, then 90, then 90 days; full fee each time |
| After passing | US$50 application fee; apply within five years |
| Keeping it | 10 CPE a year (in AI) and 30 over three years; US$20 or US$35 a year; keep CISM or CISSP active |
Original teaching example
You score 70% on a 30-question practice exam and want to know what that means for your AAISM score.
There is no conversion. ISACA reports a scaled score that adjusts for differences between exam versions, some exam questions are unscored pretest items, and the score depends on total correct answers regardless of domain. Steady results across several mixed sets and every domain are a better guide than any single percentage.
Facts some guides get wrong
The exam is 150 minutes, and you get four attempts in 12 months.
Some guides say 180 minutes, three attempts or unlimited retakes; ISACA's candidate guide says otherwise. ISACA's launch announcement gave the QAE a year of access; its AAISM page now lists a six-month subscription.
Eligibility and booking
Hold an active CISM or CISSP, register, then sit within six months.
Appointments open 48 hours after payment and can be booked up to 90 days ahead. You can reschedule without penalty up to 48 hours before your appointment.
How AAISM is scored
On a scaled score from 200 to 800, based on total correct answers.
Domain results are reported for information only. Pretest items are not scored. ISACA publishes the passing standard in its candidate guide.
Keeping AAISM
Earn CPE, pay the annual Advanced fee and keep CISM or CISSP active.
CPE reporting starts the calendar year after you certify. ISACA selects some holders at random for a CPE audit and asks for supporting documents.
Sources and fact check
Source checked: 2026-10-12
- Study methods and examples are independent CertArc teaching guidance. ISACA's pages are the authority for exam rules and fees, which can change.
- Practice results do not convert to an official score or guarantee a pass. CertArc is not affiliated with or endorsed by ISACA.
Frequently asked questions
What does AAISM stand for?
Advanced in AI Security Management. ISACA announced it in August 2025.
Who can take the AAISM exam?
Active CISM holders and CISSP holders.
Do I need AI work experience?
ISACA's AAISM pages list an active CISM or CISSP as the requirement and list no separate AI experience (checked October 12, 2026).
Can I take it with CISSP and no ISACA credential?
Yes.
How long is the exam?
90 multiple-choice questions in 2.5 hours.
Which languages is it offered in?
English, Spanish and Japanese.
Can I take it remotely?
Yes, through PSI remote proctoring, except in regions ISACA lists as test-centre only.
How long do I have after registering?
Six months. Appointments open 48 hours after payment and can be booked up to 90 days ahead.
What score do I need?
ISACA scores AAISM on a 200–800 scale and publishes the passing standard in its candidate guide. A scaled score is not a percentage of questions correct, so a practice percentage can't be converted into it.
Is there a penalty for wrong answers?
ISACA scores the number of questions answered correctly, so answer every question.
How many times can I retake it?
Four attempts in a rolling 12 months: wait 30 days, then 90, then 90. Each attempt costs the full fee.
Can I ask for a rescore?
Yes, in writing within 30 days of your results, for US$75.
What happens after I pass?
Pay the US$50 application fee and apply within five years of passing.
How many CPE hours do I need?
At least 10 a year and 30 over three years. ISACA's certification page says the 10 annual hours must be in AI.
What does maintenance cost?
US$20 for members or US$35 for non-members a year, due 1 January. One fee covers all your ISACA Advanced credentials.
What if my CISM or CISSP lapses?
Keeping AAISM requires proof of an active CISM or CISSP. ISACA revokes AAISM if certification requirements are not met.
What official prep does ISACA offer?
A Review Manual (print and digital), the QAE database (six months, 200+ questions), an Online Review Course, a Virtual Workshop, a free 12-question quiz, and Engage study groups for members.
Is CertArc part of ISACA?
No. CertArc is independent and not affiliated with ISACA.
