ISACA · Full exam outline

AAISM

Advanced in AI Security Management

Advanced AI security management

1AI Governance and Program Management31%

1.1AI-specific security policies, standards and procedures

1.2Responsible AI, ethical principles and regulatory alignment

1.3AI asset and programme lifecycle management

1.4Stakeholder roles, ownership and accountability

1.5AI incident response and continuity

2AI Risk Management31%

2.1AI threat and vulnerability identification

2.2AI risk assessment and analysis

2.3Data, model, vendor and supply-chain risk

2.4Risk treatment, residual risk and acceptance authority

2.5AI risk monitoring and reporting

3AI Technologies and Controls38%

3.1AI security architecture and lifecycle controls

3.2Data and model protection controls

3.3Adversarial threats, testing and validation

3.4Privacy, ethics, trust and safety controls

3.5Monitoring, metrics and continuous improvement

Weights are the certification body’s published values and are checked against each outline revision.