ISACA · Full exam outline
AAISM
Advanced in AI Security Management
Advanced AI security management3 domains · 15 subdomains
1
AI Governance and Program Management
31%1.1AI-specific security policies, standards and procedures
1.2Responsible AI, ethical principles and regulatory alignment
1.3AI asset and programme lifecycle management
1.4Stakeholder roles, ownership and accountability
1.5AI incident response and continuity
2
AI Risk Management
31%2.1AI threat and vulnerability identification
2.2AI risk assessment and analysis
2.3Data, model, vendor and supply-chain risk
2.4Risk treatment, residual risk and acceptance authority
2.5AI risk monitoring and reporting
3
AI Technologies and Controls
38%3.1AI security architecture and lifecycle controls
3.2Data and model protection controls
3.3Adversarial threats, testing and validation
3.4Privacy, ethics, trust and safety controls
3.5Monitoring, metrics and continuous improvement
Weights are the certification body’s published values and are checked against each outline revision.