You can audit a change management process half asleep. Pull the sample, trace each ticket to an approval, confirm that what reached production is what got signed off. Now try the same audit on a model that retrained itself last Tuesday on fresh data, started making different decisions, and never generated a single ticket.
That second audit is where AAIA exam prep gets hard. ISACA puts 46% of the exam on AI Operations, the domain that asks how AI systems are built, fed, monitored and broken. For most audit professionals, it's the part of the exam with the least overlap with anything they've studied before.
The method you already have still works. Evidence, sampling, scoping and skepticism all carry over, and your CISA background covers more of this exam than you might expect. What's new is the subject matter those methods get pointed at. Auditors who treat AAIA as a CISA refresher with AI vocabulary sprinkled on top tend to spend their hours in the wrong place, and the exam's weighting makes that an expensive mistake.
What Does AAIA Exam Prep Involve?
AAIA exam prep means getting ready for a 90-question, multiple-choice ISACA exam that you sit in 2.5 hours. Scores run on a scale from 200 to 800, and you need 450 to pass. The questions are split across three domains, weighted very unevenly. According to ISACA's AAIA exam content outline, the split looks like this:
Domain | Weight | What it tests | What your audit background already covers |
|---|---|---|---|
1: AI Governance and Risk | 33% | AI policy, governance programs, risk management, privacy and data governance, ethics and regulation | Governance structures, policy evaluation, risk assessment thinking |
2: AI Operations | 46% | Data management for AI, the AI development lifecycle, AI change management, supervision of outputs, testing, AI-specific threats, AI incident response | General change management and incident response concepts, but very little of the AI-specific content |
3: AI Auditing Tools and Techniques | 21% | Audit planning, testing and sampling, evidence collection, data analytics, reporting, plus using AI tools within the audit itself | Most of it |
Read that last column again. The domain you know best is the smallest. The domain you know least is nearly half the exam. Our AAIA domains breakdown goes through every subtopic, and the AAIA exam format guide covers question structure and test-day rules.
Where Your AAIA Study Time Should Go
We suggest putting roughly half your study time into Domain 2, a third into Domain 1, and what's left into Domain 3.|
Most auditors do the opposite without meaning to. They open the Review Manual at chapter one, work forward, and linger wherever things feel familiar. Domain 3 feels productive because every page confirms something you already know. That feeling is comfortable and costs you, because each hour spent re-learning audit sampling is an hour taken from the 46% of the exam where you have the most ground to cover.
Here's a suggested split for a CISA holder, using a 1:2:3 ratio across Domains 3, 1 and 2. The 60 hours is only an example to show the arithmetic. Your total depends on your background and pace, so treat this as a starting point and adjust it once your first practice results show where your gaps are.
Domain | Exam weight | Share of study time | Example: 60 hours |
|---|---|---|---|
3: AI Auditing Tools and Techniques | 21% | About 1/6 | 10 hours |
1: AI Governance and Risk | 33% | About 1/3 | 20 hours |
2: AI Operations | 46% | About 1/2 | 30 hours |
In this suggested split, Domain 3 gets less time than its exam weight, and Domain 2 gets more. That's deliberate. You're allocating by gap, and the gap is largest where the content is newest.|
If you qualify through CIA, a CPA designation or another listed credential, the same logic applies with one adjustment: be honest about how much IT-specific audit work you've done. Someone running SOC 2 engagements can keep the CISA split. Someone whose IT exposure is lighter should move a few hours back toward Domain 3. Check your eligibility route first in our AAIA requirements guide, since ISACA requires an active qualifying credential when you register. And if your day job is running AI security, our AAISM vs AAIA comparison and AAISM certification guide will tell you quickly whether you're preparing for the right exam.
Looking for some CISSP exam prep guidance and mentoring?
Learn about our personal CISSP mentoring
How to Learn AI Operations Without an Engineering Background
Picture a control that passes its walkthrough every quarter. The design is documented, the owner can explain it, the evidence folder is tidy. It also stopped working in March because the data flowing into it changed and nobody was watching the output.
That's model drift, and it's the easiest way into Domain 2. An AI model behaves like a control whose operating effectiveness depends on inputs that keep moving. A model can be well designed, properly approved and correctly deployed, and still drift into bad decisions months later without anyone touching the code.
Once you see Domain 2 that way, each of ISACA's seven subtopics lines up with an audit question you already know how to ask:
Domain 2 subtopic (ISACA) | The audit question you already know | What's new for AI |
|---|---|---|
A: Data management specific to AI | Are the inputs complete, accurate, and authorized? | Training data quality, bias, provenance and consent |
B: AI solution development methodologies and lifecycle | Was the system built and approved properly? | Training, validation, deployment and retraining stages |
C: Change management specific to AI | Were changes approved before they went live? | Retraining can change behavior with no code change at all |
D: Supervision of AI solutions | Is anyone checking that it still works? | Monitoring outputs, impacts and decisions over time |
E: Testing techniques for AI solutions | How do we test operating effectiveness? | Testing for accuracy, robustness and fairness |
F: Threats and vulnerabilities specific to AI | What could an attacker exploit? | Poisoned training data, manipulated inputs, model extraction |
G: Incident response management specific to AI | Who responds when it fails, and how? | Recognizing an AI incident when outputs only look slightly off |
The left-hand column is where you start each topic. The right-hand column is where you spend the study time.
For subtopic F, a useful reference is NIST's taxonomy of adversarial machine learning attacks, which sorts attacks such as poisoning and evasion by when they happen in the lifecycle and what the attacker is after. Skim it once. The way it organizes threats gives you a mental filing system for the exam's AI-specific attack scenarios.
Domain 1 has its own anchor. The NIST AI Risk Management Framework organizes AI risk work into four functions (govern, map, measure and manage), and much of the governance vocabulary you'll meet in Domain 1 sits comfortably inside that structure. Read the overview early, then come back to it whenever a governance question feels abstract.
How AAIA Questions Test Your Judgment
AAIA questions often give you four answers that are all defensible, and ask which one comes FIRST or is BEST. Your job is to pick the response an auditor should lead with, given where the engagement stands. The practice question below comes from the free DestCert app, written in the style of the real exam. It isn't a real exam item.
An organization's AI system shows gradual accuracy decline over several weeks. What should the AI auditor recommend FIRST?
A. Immediately retrain the model using the most recent production data available
B. Shut down the AI system entirely until a full forensic investigation is completed
C. Compare current performance against established baselines to determine if deviation exceeds acceptable thresholds
D. Replace the current AI model with a rule-based system to eliminate probabilistic errors
A is management's fix. Retraining might well be the eventual remedy, but recommending it first assumes you know the cause, and retraining before anyone has investigated can mask it.
B overreacts. A full shutdown until a forensic investigation is finished is out of proportion to a decline nobody has measured yet.
D throws out the model. Swapping in a rule-based system skips the investigation the decline calls for, and gives up on the AI system before anyone knows what's wrong with it.
C is the best answer. Comparing current performance against established baselines tells you whether the decline is meaningful, and whether it has crossed the thresholds the organization set for acceptable deviation. If it hasn't, retraining or shutting down would be premature. If it has, you have a measured finding to investigate. Either way, it's the evidence every other option depends on.
The only thing the question required was recognizing that an AI model can fail without anyone changing it. That's a Domain 2 idea dressed up as an audit question, and it's the pattern across much of the exam. It's also why practicing with fully explained answers teaches you more than racing through a large question bank and checking only whether you got each one right. Our AAIA exam format guide has more on reading MOST and BEST qualifiers.
AAIA Resources: What Each One Is For
ISACA publishes the core AAIA resources, and each does a different job. Plenty of people buy several, work through them side by side, and find a month later that they still have no plan. The real gap in most AAIA exam prep is sequencing: knowing which topic to learn before which, and when to switch from reading to practicing. The table shows what each one is for and when it earns its place.
Resource | What it's for | When to use it |
|---|---|---|
AAIA Exam Content Outline (free) | The official list of domains and subtopics | Day one, to map what you know against what's tested |
AAIA Review Manual (digital or print) | ISACA's reference text, organized by domain | Throughout, as the reference you check facts against |
Questions, Answers and Explanations (QAE) Database | A six-month subscription to 200+ practice questions with explanations | Once you've covered a domain, to find out what didn't stick |
AAIA Online Review Course | ISACA's on-demand video course | If you learn better by watching than reading |
AAIA Virtual Workshop | Live, instructor-led training run by ISACA | If you want a fixed schedule and live questions |
Free AAIA practice quiz | 12 sample questions from ISACA | Early on, to see the question style before you commit to a plan |
Engage AAIA study groups | ISACA's member-only discussion forum | When you're stuck on a topic and want other candidates' views |
Each of these AAIA resources is solid on its own terms. None of them tells you that subtopic C makes far more sense after subtopic A, or that the governance chapter reads better after you've seen how models get built. That ordering is the part you have to work out yourself, and it's where self-study loses the most time.
For prices, formats, and how to spot unauthorized resellers selling ISACA material, see our AAIA study guide. If you're budgeting the whole certification, our AAIA certification cost breakdown adds up the exam and application fees.
Your Last Two Weeks of AAIA Exam Prep
The final two weeks are for testing under exam conditions and fixing what the tests expose. Don't start new reading unless a practice test shows a real gap.
- Take a full, timed practice exam early in the window. That leaves you time to act on what it shows. A practice test taken two days out only tells you how worried to be.
- Sort your misses by domain and subtopic. Five wrong answers clustered in subtopic D tell you far more than a single overall score.
- Re-read explanations for questions you got right by guessing. A lucky guess in practice won't repeat itself on test day.
- Practice at exam pace. You get 150 minutes for 90 questions, which works out to about 1 minute 40 seconds per question. Wrong answers carry no penalty, so make sure every question gets an answer before time runs out.
- Drill qualifier words. For every practice question, say out loud whether it's asking for the FIRST, BEST, or MOST appropriate action before you look at the options.
- Confirm your appointment and delivery method. ISACA gives you six months from registration to sit the exam, appointments open 90 days ahead, and you can reschedule without penalty up to 48 hours before your slot. Remote proctoring is available, except for candidates in India, mainland China, and Hong Kong, who must test at a PSI center.
- If you're testing remotely, run ISACA's system compatibility check well before exam day. A webcam problem discovered the morning of the exam is a bad way to start.
Certification in 1 Week
Study everything you need to know for the CISSP exam in a 1-week bootcamp!
Frequently Asked Questions
Yes. ISACA offers the AAIA exam at PSI test centers or through remote proctoring. The exception is candidates in India, mainland China, and Hong Kong, who must sit the exam at a test center. Appointments can be booked up to 90 days in advance.
No, but you need a qualifying credential. CISA qualifies on its own. Other credentials on ISACA's list, such as CIA, US CPA, ACCA, and several international CPA and chartered accountant designations, qualify only if your role has an IT audit or IT advisory focus. The credential must be active when you register for the exam.
No. The free quiz has 12 questions, which is enough to see how ISACA phrases AAIA questions but too few to show where your gaps are across three domains. Use it at the start of your prep to get a feel for the style, then rely on a full-length practice exam closer to test day.
AAIA is built for people who already hold an audit credential and work in audit or advisory roles. If your work is AI security management, AAISM is the closer fit. It's ISACA's AI certification for security managers, and it has different eligibility requirements.
Your Audit Experience Is Half the Exam. Here's the Other Half.
Audit teams are now expected to cover AI, and few auditors know how yet. Get AAIA early, and you'll likely be the person your organization calls when the first AI audit lands on the plan. Pick your exam date first, then build your prep backwards from it.
John is a major force behind the Destination Certification CISSP program's success, with over 25 years of global cybersecurity experience. He simplifies complex topics, and he utilizes innovative teaching methods that contribute to the program's industry-high exam success rates. As a leading Information Security professional in Canada, John co-authored a bestselling CISSP exam preparation guide and helped develop official CISSP curriculum materials. You can reach out to John on LinkedIn.
