Last updated:
AAISM preparation guide
Free AAISM diagnostic: find where to start
Direct answer
CertArc's free AAISM baseline has 25 original questions: 5 warmup questions, then 20 spread across the three domains in line with the exam weights. It shows which domain to study first and why each wrong option is weaker. After it, a free 21-day trial opens the first study sprint in each domain and one 30-question practice exam. It does not predict an exam result.
At the exam's average pace of 100 seconds a question (90 questions in 150 minutes), the baseline takes about 40 minutes.
CertArc's questions are original and written to ISACA's published outline. CertArc is independent and not affiliated with ISACA.
Start AAISM baselineWhat the baseline shows you
| You see | What it tells you | What it doesn't |
|---|---|---|
| Results by domain | Which of the three domains to start with | An exam score; 20 scored questions are too few |
| Your confidence on each answer (Confident, Unsure, Guess) | Where you were right by luck, or wrong while sure | Whether that pattern will hold across 90 questions |
| An explanation for every option | Why the tempting option is weaker in this scenario | That the same option is always wrong |
| The miss reasons you tag | The kind of error you repeat, such as answering as a technician rather than an AI security manager | A rule that technical answers are always wrong |
Original teaching example
Your baseline shows strong results in AI governance and weak results in AI technologies and controls, and most of the misses there were tagged “Didn't know the concept”.
Start with the Domain 3 guide and the first Domain 3 sprint. Your tags point to a knowledge gap rather than misreading, so concept review and explained practice should come before timed sets.
Who it's for
CISM or CISSP holders planning AAISM who want a starting point before choosing study materials.
It also suits people who have used ISACA's QAE and are unsure which domain is costing them.
Who it's not for
Anyone looking for actual exam questions.
ISACA has a zero-tolerance policy for fraudulent test-taking and can nullify a score or revoke a certification. CertArc writes original scenarios instead.
Use it with ISACA's free quiz
ISACA's free 12-question AAISM quiz shows the official question style.
The quiz includes explanations; you fill in a form to see your results. The CertArc baseline adds results by domain and a study route.
What happens after the baseline
A free 21-day trial opens one sprint per domain and one practice exam.
That gives you more evidence across all three domains before you decide whether to buy anything. Your answers and reviews stay in your account.
Sources and fact check
Source checked: 2026-10-12
- Study methods and examples are independent CertArc teaching guidance. ISACA's pages are the authority for exam rules and fees, which can change.
- Practice results do not convert to an official score or guarantee a pass. CertArc is not affiliated with or endorsed by ISACA.
Frequently asked questions
Is the AAISM diagnostic free?
Yes. The baseline is free, and so is the 21-day trial that follows it.
Do I need CISM or CISSP to use it?
No. ISACA's eligibility rules apply to its exam, not to CertArc practice, and CertArc does not check your credentials.
Are these real exam questions?
No. They are original CertArc scenarios written to ISACA's published outline.
Does it predict my exam result?
No. It shows where to start.
How long does it take?
About 40 minutes at the exam's average pace; the baseline itself is untimed.
