ISACA · Full exam outline

AAIR

Advanced in AI Audit

Advanced AI risk

1AI Risk Governance and Framework Integration37%

1.1AI-related regulations, laws, frameworks and standards

1.2Integrating AI risk into existing governance programmes

1.3AI risk register and control taxonomies

1.4Roles, accountability and oversight forums

2AI Life Cycle Risk Management21%

2.1Risk in data sourcing and model development

2.2Deployment, validation and monitoring risk

2.3Third-party, vendor and supply-chain dependencies

2.4Model change, drift and decommissioning

3AI Risk Program Management42%

3.1AI risk identification and scenario analysis

3.2Risk assessment, quantification and prioritization

3.3Risk response, treatment and acceptance

3.4Risk reporting, key risk indicators and stakeholder communication

3.5Continuous monitoring and programme improvement

Weights are the certification body’s published values and are checked against each outline revision.