ISACA AAISM (Advanced in AI Security Management)
Exam AAISM ISACA Advanced
ISACA's AI security management certification: govern an AI programme, manage AI risk, and choose the controls that secure AI systems. For security managers who already hold CISM or CISSP.
Before you book: ISACA only lets you sit AAISM if you already hold an active CISM or CISSP. CISM roadmap → · CISSP roadmap →
2 courses · 20 sections · 104 lectures
Free to start: the free lessons and guides for this roadmap →
Exam domains
- AI Governance and Program Management — 31%
- AI Risk Management — 31%
- AI Technologies and Controls — 38%
Try a free AI security lab: Make it talk (~5 min) → A scripted simulation in your browser. No account needed.
The path
Start here →
Step 1 — Learn the exam material
Cover all three AAISM domains end to end.
1 course · 9 sections · 57 lectures
Learn
- CourseTotal: ISACA Advanced AI Security Management (AAISM) (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
9 sections · 57 lectures
- Course Overview 2
- Introduction 3
- AI Governance, Strategy, and Regulatory Frameworks 8
- AI Risk Management and Data Security 9
- AI Lifecycle Security and Program Management 10
- AI Threat Landscape and Resiliency Planning 9
- Incident Response, Vendor Risk, and AI Ethics 9
- AI Security Controls and Continuous Monitoring 6
- Audio Version of Training 1
Step 2 — AI governance and programme management
Domain 1: AI strategy and policy, the AI asset and data life cycle, and the AI security programme.
Learn
- CourseCovered in Total: ISACA Advanced AI Security Management (AAISM) (opens in a new tab)opens on courses.stationx.net — AI governance, strategy and regulatory frameworks, AI life cycle security and programme management, and Incident Response, Vendor Risk, and AI Ethics sections 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
9 sections · 57 lectures
- Course Overview 2
- Introduction 3
- AI Governance, Strategy, and Regulatory Frameworks 8
- AI Risk Management and Data Security 9
- AI Lifecycle Security and Program Management 10
- AI Threat Landscape and Resiliency Planning 9
- Incident Response, Vendor Risk, and AI Ethics 9
- AI Security Controls and Continuous Monitoring 6
- Audio Version of Training 1
- FreeAI Governance Framework: 10 Questions to Ask
- Free videoAI Governance: 10 Questions You Must Ask
- FreeAI Regulations Around the World
- FreeAI Regulation News: Who Really Controls AI Now
- FreeShadow AI: What Works to Reduce the Risk
- FreeShadow AI Statistics
- Free video6 Tools to Find the Shadow AI Your Staff Are Already Using
Step 3 — AI risk management
Domain 2: assess and treat AI risk, and manage AI vendors and the AI supply chain.
Learn
- CourseCovered in Total: ISACA Advanced AI Security Management (AAISM) (opens in a new tab)opens on courses.stationx.net — AI risk management, threat landscape and resiliency, and vendor risk sections 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
9 sections · 57 lectures
- Course Overview 2
- Introduction 3
- AI Governance, Strategy, and Regulatory Frameworks 8
- AI Risk Management and Data Security 9
- AI Lifecycle Security and Program Management 10
- AI Threat Landscape and Resiliency Planning 9
- Incident Response, Vendor Risk, and AI Ethics 9
- AI Security Controls and Continuous Monitoring 6
- Audio Version of Training 1
Step 4 — Know the threats you manage
Domain 2, AI threat and vulnerability management: what each attack on an AI system is, so you can rate it.
1 course · 11 sections · 47 lectures
Learn
- CourseGenerative AI Risks & Cybersecurity: LLM Security (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
11 sections · 47 lectures
- Training Overview 1
- - Introduction & Lab Setup 4
- - The GenAI Threat Landscape 4
- - Prompt Injection & Jailbreaking 6
- - AI-Specific Attack Vectors 6
- - Defending GenAI Systems 8
- - Secure GenAI Development 5
- - Governance, Compliance & Ethics 6
- - Emerging Threats & Future 4
- - Capstone & Conclusion 2
- Audio Version of the Course 1
Step 5 — AI technologies and controls
Domain 3: AI security architecture, the model life cycle, data, privacy and safety controls, and monitoring.
Learn
- CourseCovered in Total: ISACA Advanced AI Security Management (AAISM) (opens in a new tab)opens on courses.stationx.net — AI life cycle security and AI security controls and monitoring sections 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
9 sections · 57 lectures
- Course Overview 2
- Introduction 3
- AI Governance, Strategy, and Regulatory Frameworks 8
- AI Risk Management and Data Security 9
- AI Lifecycle Security and Program Management 10
- AI Threat Landscape and Resiliency Planning 9
- Incident Response, Vendor Risk, and AI Ethics 9
- AI Security Controls and Continuous Monitoring 6
- Audio Version of Training 1
Before the exam
- FreeISACA's free AAISM practice quiz (opens in a new tab) opens on isaca.org
Where this leads
Choose your next roadmap
Next level
AI-Driven Security Engineering
After this roadmap: direct AI to build real security solutions. “No coding background required. You direct the AI; the AI does the building.”
See the AI-Driven Security Engineering Master’s →