8%

of organisations regularly run AI-specific incident response exercises. ISACA State of Cybersecurity 2026.

ISACA Advanced in AI Security Management (AAISM) certification

AI Moved In.
Security Must Lead.

Just 8% of organisations regularly rehearse their response to an AI incident. AAISM proves you can govern, assess and secure enterprise AI as a security leader.

HRD Corp claimableYayasan Peneraju: may be eligibleKL or online

Exam

ISACA AAISM

Course

2 days

Course fee

RM7,000

Exam fee

Included

Next intake

22 Feb 2027

Quick answer

What is AAISM?

ISACA Advanced in AI Security Management (AAISM) is ISACA’s AI-centric security management certification. It validates that experienced security managers can govern AI, manage AI risk, and apply the right technologies and controls to AI systems. It is open to active CISM or CISSP holders, and the exam is 90 questions.

Exam facts verified against isaca.org on 23 Oct 2026

FOR

CISM and CISSP holders who lead security

ROLES

Information security manager, AI security manager, CISO, security director

SKIP IF

You do not hold CISM or CISSP yet. Start with CISM

01

The Credential

What you study, practise and sit to earn it.

Hold an active CISM or CISSP, pass the AAISM exam and apply to ISACA. ISACA describes it as the first and only AI-centric security management certification, and it sits at the top of ISACA’s security pathway.

COURSE

2 days, 3 domains

FOCUS

Securing enterprise AI

EXAM

90 questions

CREDENTIAL

ISACA AAISM

Awarded by

ISACA

Level

Advanced, top of ISACA’s security pathway

Prerequisite

Active CISM or CISSP

Apply within

5 years of passing the exam

Upkeep

10 AI CPE hours a year

Related

AAIA, AAIR

02

Decide in 60 Seconds

Four options people weigh against each other.

If you want to

Choose

Why

Lead AI security across the enterprise

→

AAISM

AI governance, risk and controls for security leaders

Audit AI systems and controls

→

AAIA

AI audit for CISA, CIA and CPA holders

Get the security management credential first

→

CISM

ISACA’s information security management credential

Engineer Microsoft cloud and AI security

→

Microsoft SC-500

Hands-on Azure, data and AI workload security

A qualifying credential is required. Are you ready?
0/4

Tick what applies. 3 or 4: you are ready for this course. Fewer: start with CISM.

03

What the Exam Covers

Three domains from ISACA’s AAISM exam content outline. Bars to scale.

3 domains, 90 questionsLargest: AI Technologies and Controls, 38%

AI Technologies and Controls 38%
AI Governance and Program Management 31%
AI Risk Management 31%

Source: ISACA AAISM exam content outline.

04

What the Course Covers

Two days across the three AAISM domains.

Two days of instructor-led training for experienced security managers. You build on your CISM or CISSP knowledge and focus on what changes when the system is AI.

Domain 1

AI Governance and Program Management

  • Stakeholders, frameworks and regulatory requirements
  • AI strategies, policies and procedures
  • AI asset and data life cycle management
  • AI security programme development
  • Business continuity and incident response

Domain 2

AI Risk Management

  • AI risk assessment, thresholds and treatment
  • AI threat and vulnerability management
  • AI vendor and supply chain management

Domain 3

AI Technologies and Controls

  • AI security architecture and design
  • AI life cycle: model selection, training and validation
  • Data management controls
  • Privacy, ethical, trust and safety controls
  • Security controls and monitoring

90

questions on exam day. Each domain includes exam-style practice so you learn how ISACA asks.

05

Why Now

How ready organisations are for AI incidents, and why train with us.

8%

of organisations regularly run AI-specific incident response exercises

ISACA State of Cybersecurity 2026

45%

report LLM security operations as a skills gap, up 12 points in a year

ISACA State of Cybersecurity 2026

56%

do not know how quickly they could halt an AI system after a security incident

ISACA AI Pulse Poll 2026

6 hrs

Six Hours to Report. Who’s Watching the Alerts?

Malaysia’s Cyber Security Act 2024 (Act 854) came into force on 26 August 2024. Critical infrastructure entities must report a cyber security incident within six hours, and managed SOC monitoring services now need a licence. Security leaders will be asked how AI fits into that response.

NACSA; Cyber Security (Notification of Cyber Security Incident) Regulations 2024

ISACA Accredited Elite Partner

Training aligned to ISACA’s AAISM job practice

Exam included

One fee covers training and your exam

HRD Corp registered

This course is HRD Corp claimable

KL or online

Instructor-led in class or live online

06

The Cost, All In

Every figure per person, in ringgit.

Fees

Two-day courseIncluded

AAISM exam registrationIncluded

Funding

HRD Corp claim for employersClaimable

Yayasan Peneraju financing (Bumiputera)May be eligible

Course with exam

RM7,000

Dates

Where

Fee

Mon 22 to Tue 23 Feb 2027

Kuala Lumpur or online

RM7,000 incl. exam

Wed 14 to Thu 15 Apr 2027

Kuala Lumpur or online

RM7,000 incl. exam

Wed 26 to Thu 27 May 2027

Kuala Lumpur or online

RM7,000 incl. exam

Wed 6 to Thu 7 Oct 2027

Kuala Lumpur or online

RM7,000 incl. exam

Training a team? We run private intakes on dates that suit your organisation, with HRD Corp claims handled alongside you.

07

Exam and Renewal

What exam day looks like, and what happens after you pass.

Certification

ISACA Advanced in AI Security Management (AAISM)

Questions

90 multiple choice

Duration

150 minutes

Passing score

450 on a 200 to 800 scale

Delivery

PSI test centre or remote proctoring

Eligibility window

Six months from registration

Eligibility

Active CISM or CISSP

Exam fee

Included in the course fee

EVERY YEAR

10 hours of AI CPE

From the calendar year after you certify, earn and report 10 CPE hours in the specialised domain of artificial intelligence each year.

ALSO REQUIRED

Keep your base credential

Keep your qualifying credential active, follow ISACA’s Code of Professional Ethics, and pay the annual maintenance fee.

FAQ

Questions People Ask

What is AAISM?

ISACA Advanced in AI Security Management (AAISM) is an AI-centric security management certification for experienced security leaders. It covers AI governance and programme management, AI risk management, and AI technologies and controls.

Holders of an active CISM or CISSP. You need one of these credentials to sit the exam and to be certified.

At Trainocate Malaysia the two-day AAISM course is RM7,000 per person, including the exam. The course is HRD Corp claimable, and Malaysian Bumiputera learners may be eligible for Yayasan Peneraju funding.

90 multiple-choice questions, scored on ISACA’s 200 to 800 scale. You can sit it at a PSI test centre or with remote proctoring.

Three domains: AI Technologies and Controls (38%), AI Governance and Program Management (31%), and AI Risk Management (31%).

CISM covers information security management. AAISM builds on it for AI, and ISACA now places AAISM above CISM in its security pathway.

Earn 10 CPE hours in artificial intelligence each year, keep your CISM or CISSP active, and pay the annual maintenance fee.

Lead Security for Enterprise AI

Pick an intake. An advisor confirms fees, your eligibility, HRD Corp claims and Yayasan Peneraju with you.

  • Next intake: 22 to 23 Feb 2027
  • RM7,000, exam included

Sources

  1. ISACA: AAISM certification
  2. ISACA: AAISM exam content outline
  3. ISACA: Get AAISM certified
  4. ISACA: State of Cybersecurity 2026 press release (22 Sep 2026)
  5. ISACA: AI Pulse Poll 2026 preview press release (23 Mar 2026)
  6. Trainocate: AAISM course page
  7. NACSA: Cyber Security Act 2024 (Act 854)
  8. MAICSA: Act 854 regulations summary