ISACA · Full exam outline
AAIR
Advanced in AI Audit
Advanced AI risk3 domains · 13 subdomains
1
AI Risk Governance and Framework Integration
37%1.1AI-related regulations, laws, frameworks and standards
1.2Integrating AI risk into existing governance programmes
1.3AI risk register and control taxonomies
1.4Roles, accountability and oversight forums
2
AI Life Cycle Risk Management
21%2.1Risk in data sourcing and model development
2.2Deployment, validation and monitoring risk
2.3Third-party, vendor and supply-chain dependencies
2.4Model change, drift and decommissioning
3
AI Risk Program Management
42%3.1AI risk identification and scenario analysis
3.2Risk assessment, quantification and prioritization
3.3Risk response, treatment and acceptance
3.4Risk reporting, key risk indicators and stakeholder communication
3.5Continuous monitoring and programme improvement
Weights are the certification body’s published values and are checked against each outline revision.