36%

of digital trust professionals say humans approve most AI-generated actions before they run. ISACA AI Pulse Poll 2026.

ISACA Advanced in AI Audit (AAIA) certification

Who Checks What the AI Decides?

Only about a third of organisations have people approve most AI-generated actions before they run. AAIA proves you can audit AI governance, operations and controls, and back your findings with evidence.

HRD Corp claimableYayasan Peneraju: may be eligibleKL or online

Exam

ISACA AAIA

Course

2 days

Course fee

RM7,000

Exam fee

Included

Next intake

2 Feb 2027

Quick answer

What is AAIA?

ISACA Advanced in AI Audit (AAIA) is ISACA’s advanced certification for auditors and advisors who assess AI. It covers AI governance and risk, AI operations, and AI auditing tools and techniques. It is open to holders of an active CISA or another qualifying audit credential, and the exam is 90 questions in 150 minutes.

Exam facts verified against isaca.org on 23 Oct 2026

FOR

CISA, CIA and CPA holders who audit or advise on AI

ROLES

IT auditor, senior IT auditor, risk manager, audit advisor

SKIP IF

You do not hold CISA or a qualifying audit credential yet. Start with CISA

01

The Credential

What you study, practise and sit to earn it.

Hold an active CISA or another qualifying advanced-auditing credential, pass the AAIA exam and apply to ISACA. ISACA calls it the world’s first advanced AI audit certification.

COURSE

2 days, 3 domains

FOCUS

Auditing AI, and auditing with AI

EXAM

90 questions, 150 min

CREDENTIAL

ISACA AAIA

Awarded by

ISACA

Level

Advanced

Prerequisite

Active CISA or qualifying audit credential

Apply within

5 years of passing the exam

Upkeep

10 AI CPE hours a year

Related

AAISM, AAIR

02

Decide in 60 Seconds

Four options people weigh against each other.

If you want to

Choose

Why

Audit AI systems and use AI in audits

→

AAIA

AI governance, operations and audit techniques

Secure enterprise AI as a security leader

→

AAISM

AI security management for CISM and CISSP holders

Build the IS audit foundation first

→

CISA

The global standard for IS audit and assurance

Manage AI risk across the business

→

AAIR

ISACA’s AI risk credential

A qualifying credential is required. Are you ready?
0/4

Tick what applies. 3 or 4: you are ready for this course. Fewer: start with CISA.

03

What the Exam Covers

Three domains from ISACA’s AAIA exam content outline. Bars to scale.

3 domains, 90 questionsLargest: AI Operations, 46%

AI Operations 46%
AI Governance and Risk 33%
AI Auditing Tools and Techniques 21%

Source: ISACA AAIA exam content outline.

04

What the Course Covers

Two days across the three AAIA domains.

Two days of instructor-led training built on what you already know as an auditor. The focus is on what is different about AI, not audit fundamentals.

Domain 1

AI Governance and Risk

  • AI models, considerations and requirements
  • AI governance and programme management
  • AI risk management
  • Privacy and data governance programmes
  • Leading practices, ethics, regulations and standards for AI

Domain 2

AI Operations

  • Data management for AI
  • AI solution development
  • Threat and vulnerability management for AI
  • Change management for AI

Domain 3

AI Auditing Tools and Techniques

  • Audit planning and design
  • Testing and sampling
  • Evidence collection and data analytics
  • Using AI tools in the audit

90

questions on exam day, in 150 minutes. Each domain includes exam-style practice so you learn how ISACA asks.

05

Why Now

How much oversight AI really gets, and why train with us.

36%

say humans approve most AI-generated actions before they run

ISACA AI Pulse Poll 2026

18%

say disclosure of AI use in work products is required and enforced

ISACA AI Pulse Poll 2026

43%

are highly confident they could explain a serious AI incident to leaders or regulators

ISACA AI Pulse Poll 2026

6 hrs

Six Hours to Report. Who’s Watching the Alerts?

Malaysia’s Cyber Security Act 2024 (Act 854) came into force on 26 August 2024. Critical infrastructure entities must report a cyber security incident within six hours, and managed SOC monitoring services now need a licence. As AI enters critical systems, auditors will be asked to show that controls work.

NACSA; Cyber Security (Notification of Cyber Security Incident) Regulations 2024

ISACA Accredited Elite Partner

Training aligned to ISACA’s AAIA job practice

Exam included

One fee covers training and your exam

HRD Corp registered

This course is HRD Corp claimable

KL or online

Instructor-led in class or live online

06

The Cost, All In

Every figure per person, in ringgit.

Fees

Two-day courseIncluded

AAIA exam registrationIncluded

Funding

HRD Corp claim for employersClaimable

Yayasan Peneraju financing (Bumiputera)May be eligible

Course with exam

RM7,000

Dates

Where

Fee

Tue 2 to Wed 3 Feb 2027

Kuala Lumpur or online

RM7,000 incl. exam

Mon 26 to Tue 27 Apr 2027

Kuala Lumpur or online

RM7,000 incl. exam

Thu 10 to Fri 11 Jun 2027

Kuala Lumpur or online

RM7,000 incl. exam

Mon 9 to Tue 10 Aug 2027

Kuala Lumpur or online

RM7,000 incl. exam

Wed 6 to Thu 7 Oct 2027

Kuala Lumpur or online

RM7,000 incl. exam

Training a team? We run private intakes on dates that suit your organisation, with HRD Corp claims handled alongside you.

07

Exam and Renewal

What exam day looks like, and what happens after you pass.

Certification

ISACA Advanced in AI Audit (AAIA)

Questions

90 multiple choice

Duration

150 minutes

Passing score

450 on a 200 to 800 scale

Delivery

PSI test centre or remote proctoring

Eligibility window

Six months from registration

Eligibility

Active CISA or qualifying audit credential

Exam fee

Included in the course fee

EVERY YEAR

10 hours of AI CPE

From the calendar year after you certify, earn and report 10 CPE hours in the specialised domain of artificial intelligence each year.

ALSO REQUIRED

Keep your base credential

Keep your qualifying credential active, follow ISACA’s Code of Professional Ethics, and pay the annual maintenance fee.

FAQ

Questions People Ask

What is AAIA?

ISACA Advanced in AI Audit (AAIA) is an advanced certification for IT auditors and advisors. It validates that you can audit AI governance, risk and operations, and use AI tools and techniques in your audits.

Holders of an active CISA or another qualifying advanced-auditing credential. ISACA publishes the full list of qualifying designations, which includes credentials such as CIA and CPA.

At Trainocate Malaysia the two-day AAIA course is RM7,000 per person, including the exam. The course is HRD Corp claimable, and Malaysian Bumiputera learners may be eligible for Yayasan Peneraju funding.

90 multiple-choice questions in 150 minutes. You need a scaled score of 450 on a 200 to 800 scale. You can sit it at a PSI test centre or with remote proctoring.

Three domains: AI Operations (46%), AI Governance and Risk (33%), and AI Auditing Tools and Techniques (21%).

AAIA is for auditors and advisors who assess AI. AAISM is for security managers who secure it, and needs CISM or CISSP. Choose the one that matches your current credential and role.

Earn 10 CPE hours in artificial intelligence each year, keep your qualifying credential active, and pay the annual maintenance fee.

Audit the AI Others Trust

Pick an intake. An advisor confirms fees, your eligibility, HRD Corp claims and Yayasan Peneraju with you.

  • Next intake: 2 to 3 Feb 2027
  • RM7,000, exam included

Sources

  1. ISACA: AAIA certification
  2. ISACA: AAIA exam content outline
  3. ISACA: Get AAIA certified
  4. ISACA: AAIA Exam Candidate Guide (PDF)
  5. ISACA: AI Pulse Poll 2026 preview press release (23 Mar 2026)
  6. Trainocate: AAIA course page
  7. NACSA: Cyber Security Act 2024 (Act 854)
  8. MAICSA: Act 854 regulations summary