AAISM
Advanced in AI Security Management
ISACA specialization for AI Security Management. Requires active CISM or CISSP. Focus on AI Governance & Program Management, AI Risk Management, and AI Technologies & Controls. For security leaders managing AI risks.
› Quality score
Four-axis SecProve rubric, each 0–10. SecProve editorial assessment — each axis carries a written justification so you can push back on any single call without dismissing the whole score.
› Market signals
public, citable inputs to the recognition score› Built for these roles
› Exam format
90 questions, 2.5 hours, 450/800
ISACA member $575 / non-member $760. 4 attempts per rolling 12-month window.
› Recertification
CPEs per ISACA policy
› 3-year cost of ownership
Excludes study materials, training, retake risk, and lost-wage opportunity. Use as a floor estimate.
› NICE Framework work roles
The NIST NICE work-role IDs this cert maps to. NICCS lookup.
› Core domains covered
The 3 domains this cert is centrally about. Passing the exam demonstrates working knowledge of each.
EU AI Act compliance, NIST AI RMF, AI risk assessment, model cards, algorithmic auditing, AI incident response.
Guardrails, content filtering bypass, model monitoring, drift detection, output control.
Risk frameworks (NIST RMF, ISO 31000, FAIR), policy development, audit, regulatory compliance, third-party risk.
› Prerequisites
Active CISM or CISSP
› Progression
requiredrecommendedWhere this cert fits in the typical learning path. Required edges are vendor-gated; recommended edges reflect de facto industry progression.
› Study materials
Curated starting points. Not exhaustive — vet each against your learning style and the current exam version.
- ISACA Official AAISM Online Course
- ISACA AAISM QAE
› Version & lifecycle
Requires CISM + AI experience.
› Salary signal
AI security program manager, US, 5+ years. Requires CISM prerequisite.
ISACA Salary Survey extrapolation · 2024 · US base only · p25–p75 range
› How it compares
AAISM is security-management-flavored; AIGP is broader governance + privacy.
↔ Compare side-by-side› Careers that commonly pursue this cert
The policy/controls counterpart to the AI Security Engineer — owns risk frameworks, regulatory mapping (EU AI Act, NIST AI RMF), model documentation, and AI incident response policy.
See this cert’s domains highlighted on the interactive map, or compare it against the rest of the catalog.