A Complete AAISM Certification Renewal Guide on How to Maintain Your Credential and Earn CPEs

  •   min.
  • Updated on: February 19, 2026

    • Expert review
    • Home
    • /
    • Resources
    • /
    • A Complete AAISM Certification Renewal Guide on How to Maintain Your Credential and Earn CPEs

    If you have already earned the AAISM certification, you know it was not easy to get. You invested time, focus, and effort to pass a challenging exam that tests how you think about AI security, governance, and leadership. Renewing your AAISM certification is the natural next step, not an afterthought. It keeps you relevant as AI risks, regulations, and expectations continue to evolve. More importantly, maintenance is not just about keeping a title on your resume. It is a responsibility that shows you are still committed to leading secure and accountable AI adoption.

    This guide helps you approach AAISM certification renewal with clarity, so you can stay compliant, credible, and confident in your role as an AI security leader.

    Let’s get started!

    What Is AAISM Certification Renewal and Why Does It Matter?

    AAISM certification renewal means you must consistently meet CPE requirements to keep your credential active and in good standing. You need to earn continuing professional education credits (CPE) every year and across the full renewal cycle, not just at the last minute. This process helps you stay current with changes in AI security, governance, and risk management as technology and regulations continue to shift.

    Following the CPE rules is not optional. If you miss required credits, overlook reporting deadlines, or cannot provide proof during an audit, your AAISM certification can be revoked. When you keep up with renewal requirements, you show employers and stakeholders that you take your professional growth seriously and that you can be trusted to lead AI security initiatives responsibly.

    Why Renewal Matters for Your AI Security Career

    Renewing your AAISM certification isn’t just a box to check. It’s a statement about your ongoing commitment to AI security and governance. It shows that you are actively keeping pace with emerging risks, changing regulations, and leadership expectations. When you track your CPEs throughout the year, you avoid the stress of last-minute catch-ups and reduce the risk of renewal problems that could affect your professional reputation.

    Beyond compliance, renewal builds trust. Leaders, colleagues, and stakeholders see your active certification as proof that you can guide secure AI adoption with up-to-date knowledge and practical judgment. Maintaining your AAISM credential demonstrates that you take ownership of your expertise and the decisions you make, reinforcing your role as a trusted leader in AI security.

    Staying current also keeps you competitive for AAISM jobs, especially leadership roles that expect proven, up-to-date expertise in AI security and governance.

    AAISM CPE Requirements You Must Meet

    Now that you understand why renewal matters, it is important to look closely at the CPE requirements themselves. Apart from the main AAISM exam requirements, you must diligently finish these renewal requirements after passing the exam. These rules are straightforward, but they require consistency and planning. You must know what is expected each year and across the full cycle to avoid mistakes when renewing your AAISM Certification.

    Annual Minimum CPE Hours for AAISM

    You must earn at least 10 CPE hours every calendar year after becoming AAISM certified. This annual requirement encourages you to stay engaged with AI security topics instead of postponing learning until the end of the cycle. Annual CPEs can come from training, webinars, conferences, or approved professional activities. You should spread your credits across the year to make renewal more manageable and keep your knowledge aligned with current AI security challenges.

    Total CPE Hours Over a 3-Year Cycle

    Across the full renewal cycle, you are required to complete a minimum of 30 CPE hours over three years. The annual requirement still applies, so you cannot rely on earning all credits in a single year. This cycle-based approach reflects how AI security roles evolve, not in short bursts. Planning your CPEs across the cycle helps you stay compliant while steadily building deeper leadership and governance skills.

    Qualifying CPE Activities and Scope

    Your CPE activities must be related to AI security, governance, risk management, or leadership responsibilities tied to your role. ISACA allows relevant CPEs earned for other certifications, such as CISM or CISSP, to count toward AAISM when the content overlaps. This makes renewal more practical if you already maintain multiple credentials. The key is that each activity supports your ability to lead and manage secure AI adoption, not just technical learning in isolation.

    Approved Ways to Earn AAISM CPE Credits

    So, you need CPE credits to maintain your AAISM certification. But don’t worry, earning them isn’t as daunting as it sounds. It doesn’t have to feel like boring classroom work. There are several ways to get your hours while actually learning new skills, staying ahead in AI security, and building your leadership.

    Here’s a breakdown of how you can earn them:

    • Conferences and Large-Scale Industry Events - Big events can feel intimidating, but they’re a goldmine for CPEs. Attending ISACA’s virtual conferences can give you up to 32 CPE credits, all in one go. These events focus on AI security, governance, risk, and leadership, so everything you learn is immediately relevant to your role. You get to hear from experts, see how other organizations handle challenges, and pick up ideas you can apply right away. Plus, most conferences track your participation, making reporting your CPEs a breeze.
    • Webinars and Online Training Sessions - If you prefer learning in smaller bites, ISACA webinars and online training sessions are perfect. You can earn up to 36 CPE credits per year while staying at your desk. These sessions cover AI security leadership, emerging threats, and practical governance strategies. They’re flexible, often interactive, and let you fit learning around your busy schedule without skipping a beat. It’s an easy way to keep your skills sharp while steadily working toward your annual CPE minimum.
    • On-Demand Learning and Recorded Sessions -Life happens, and sometimes you miss live events. That’s where on-demand learning comes in. ISACA offers recorded conferences, webinars, and training programs that let you earn CPEs on your own time. You can pause, replay, and focus on topics that matter most to your AI security work. It’s an excellent way to catch up, fill gaps, and maintain your certification without adding stress to your schedule.
    • Training Courses and Skills-Based Labs - Want hands-on experience while earning CPEs? Training courses and skills-based labs are where you get it. Each completed course or lab can give you up to 32 CPE credits, and the exercises often mirror real-world AI security scenarios. You learn by doing, and your CPEs grow alongside your practical expertise. For many AAISM-certified professionals, combining these with webinars and conferences makes planning your CPE hours simple and effective.
    • Volunteering and Professional Contribution - Giving back to the community can also boost your CPE count. Volunteering as a mentor, taking on leadership roles in your local ISACA chapter, or participating in AI security initiatives all count. It’s a win-win: you help others, expand your network, and earn credits for your certification. Plus, it reinforces your reputation as a committed AI security leader who doesn’t just hold a title but actively contributes to the field.

    Additional Maintenance Obligations

    Keeping your AAISM certification active goes beyond just earning CPEs. There are a few other key responsibilities you need to manage each year to stay in good standing. Meeting these obligations shows that you’re not just certified; you’re a professional who takes AI security leadership seriously.

    Maintaining a Qualifying Certification in Good Standing

    To hold your AAISM credential, you must maintain an active CISM or CISSP certification. This requirement ties your advanced AI security knowledge to a recognized base of information security expertise. If your qualifying certification lapses, your AAISM status could be affected, so staying current is essential.

    Annual Maintenance Fees

    Each year, you are required to pay a maintenance fee of US$20 if you’re an ISACA member or US$35 if you’re not. Fees are due by January 1 to cover the full calendar year. Staying on top of this small but important obligation prevents interruptions in your credentials and keeps your certification record clean.

    Adhering to ISACA’s Code of Professional Ethics

    Your AAISM certification also comes with a responsibility to follow the ISACA Code of Professional Ethics. This isn’t just a formality but a reflection of your commitment to acting with integrity, accountability, and professionalism in all AI security activities. Observing these standards reinforces your credibility and trustworthiness as a leader in the field.

    How to Report Your CPE Hours Correctly

    Earning CPE credits is only half the job. Reporting them the right way is what keeps your AAISM certification in good standing. ISACA’s CPE reporting process is set up so you can track your progress, upload proof, and make sure your hours count toward your renewal cycle without confusion. Getting comfortable with the MyISACA dashboard now will save you a lot of time later.

    Logging CPE Through the MyISACA Dashboard

    Once you’ve completed an approved activity, head over to your MyISACA dashboard to report it. Log in and go to Certifications & CPE Management, then select Report and Manage CPE for your AAISM credential. Click Add New CPE Record and fill in the basics: the activity title, who sponsored it, the dates, and how many hours you earned from it. This clear record helps you stay organized and prevents surprises when renewal time arrives.

    Proof and Documentation Requirements

    You need to upload proof of each activity when you report it. That means certificates of completion, attendance confirmations, or signed letters from the event organizer. This includes anything that shows you were really there and engaged. If your documents are organized and current, you’ll breeze through any future audit requests without scrambling.

    Pre-Loaded vs Self-Reported CPE Hours

    Some CPEs earned through ISACA events, like webinars or conferences, are pre‑loaded into your account. Before they count, you still have to apply them on the CPE screen under your AAISM certification. Other activities, especially those outside ISACA, must be self‑reported by entering the details yourself and saving each entry. Knowing the difference and checking unapplied credits regularly keeps your records accurate and your renewal on track.

    CPE Audits and Compliance Checks

    Even if you report your CPEs accurately, ISACA may perform an audit to verify that all activities are legitimate. Audits are a normal part of maintaining professional credibility and aren’t meant to be intimidating. They help protect the value of your AAISM certification for everyone in the community. Staying organized and keeping proper documentation makes this process straightforward and stress-free.

    What Happens During a CPE Audit

    ISACA randomly selects certification holders for an audit to review reported CPE activities. If you are chosen, you will need to provide proof for each activity, such as certificates of completion, attendance confirmations, or documentation of volunteering hours. The audit confirms that your reported credits align with ISACA’s CPE guidelines. While it may seem formal, being prepared ensures that the process is quick and demonstrates your commitment to professional standards.

    How to Prepare for a CPE Audit

    The key to handling an audit smoothly is organization. Keep all supporting documentation for at least 12 months after the end of each three-year cycle. Store certificates, attendance letters, and any volunteer confirmations in one place, either digitally or physically. Regularly reviewing your reported CPE hours against your documentation helps you catch mistakes early and ensures you can respond confidently if audited.

    Looking for some exam prep guidance and mentoring?


    Learn about our personal mentoring

    Image of Lou Hablas mentor - Destination Certification

    What Happens If You Don’t Meet Renewal Requirements

    Even with the best planning, there’s always a risk that a certification could lapse if renewal requirements aren’t met. Let’s be clear: letting your AAISM credential expire isn’t just a paperwork issue. It can affect your credibility, career opportunities, and your role as a trusted AI security leader.

    If your certification is revoked, you can appeal by submitting detailed documentation and paying any outstanding fees, along with a US$50 reinstatement fee. If the appeal is denied, you must re-take the AAISM exam and re-apply, which is a time-consuming process best avoided with proper maintenance

    But when your certification expires, you lose the privileges of being AAISM-certified, including recognition for your AI security leadership skills. Employers may no longer see you as fully up-to-date in AI governance, risk management, or compliance.

    The good news is that an expired certification doesn’t have to be permanent. You can reapply for AAISM, but you’ll need to retake the exam and meet all current requirements, including the CPEs, exam fees, and ethics standards. In short, staying on top of your renewal is far easier than letting your certification lapse and going through the full reinstatement process.

    Best Practices to Stay Ahead of Your AAISM Renewal

    Maintaining your AAISM certification doesn’t have to feel overwhelming. With a few smart habits, you can stay on top of requirements and even make the process enjoyable.

    1. Plan CPE Activities Year-Round

    Don’t wait until December to start earning credits. Spread your activities across the calendar so you can meet your annual minimum without stress. Recurring events, online training, and volunteer opportunities help you pace yourself and avoid last-minute rushes.

    2. Choose High-Value Learning That Supports Career Growth

    Prioritize activities that give more CPE credits, such as conferences, structured training courses, and skills-based labs. Use webinars and on-demand learning to supplement and consistently meet your annual requirements. This approach keeps your learning practical and aligned with your role in AI security leadership.

    3. Keep Organized Records From Day One

    Maintain a simple system for storing certificates, attendance letters, and proof of participation. Digital folders or a dedicated dashboard tracker make reporting faster and prepare you for any potential audits. A few minutes spent organizing your documents after each activity can save hours later.

    4. Combine Learning With Real Work Projects

    Whenever possible, tie your CPE activities to your day-to-day work. Leading an AI governance project, conducting risk assessments, or developing AI policies can all count toward CPE credits if documented properly. This ensures your learning translates directly into career impact.

    5. Review and Apply Pre-Loaded CPE Hours Regularly

    Check your MyISACA dashboard periodically for pre-loaded CPEs from ISACA events. Applying them as you earn them prevents gaps in your records and avoids surprises at renewal time. Regular reviews also make it easier to track how many self-reported hours you still need.

    6. Engage With the AI Security Community

    Volunteer, mentor, or participate in ISACA chapter initiatives. These activities not only earn CPE credits but also build your professional network, increase visibility, and reinforce your reputation as a committed AI security leader. Giving back while learning keeps your renewal process meaningful and career-focused.

    Certification in 3 Day 


    Study everything you need to know for the AAISM exam in a 3-day bootcamp!

    FAQs About AAISM Certification Renewal

    Can CPE activities count for multiple ISACA certifications?

    Yes, CPE activities that are relevant to AI security or leadership can often count toward other ISACA certifications, such as CISM or CISSP. You still need to ensure the content applies to each certification’s domain. Applying overlapping activities can save time while keeping all your credentials active.

    What documents do I need to upload for CPE proof?

    You must upload proof of participation, such as certificates of completion, attendance letters, or signed confirmations from event organizers. Keep these organized so you can quickly respond if ISACA requests them during an audit. Proper documentation ensures your hours are credited correctly, and your renewal goes smoothly.

    What happens if I miss the January 1 renewal deadline?

    If you miss the annual maintenance fee deadline, your certification could lapse, meaning you temporarily lose the privileges of being AAISM-certified. You may have a grace period, but it’s safer to pay on time to avoid interruptions. If your certification lapses, you would need to pay any outstanding fees and may be subject to additional reinstatement requirements.

    Do I have to maintain CISM or CISSP all the time?

    Yes, holding an active CISM or CISSP certification is a requirement to maintain your AAISM credential. If your qualifying certification lapses, your AAISM status could also be affected. Staying current ensures your advanced AI security knowledge remains tied to a recognized base of information security expertise.

    Is Isaca Aaism worth it?

    ISACA AAISM can be worth it if you already hold CISM or CISSP and your career is moving toward AI governance, AI risk management, and enterprise security leadership for AI systems. The credential’s value is highest when you are responsible for creating policies, selecting controls, assessing AI vendor risk, and communicating AI-related security risks to executives. Because AI adoption is accelerating and regulations are evolving, organizations increasingly need professionals who can define secure AI practices at scale. AAISM can help you stand out by signaling structured knowledge in this niche. However, it is not a magic bullet. Pair it with real projects: create an AI security policy, run an AI threat model workshop, or build an AI system security assessment template. If your current role does not involve AI security decisions, the ROI may be lower, and you might prioritize foundational security leadership work first. For an SEO FAQ page, include a quick decision rubric: role fit, current credential eligibility, employer demand, and project alignment.

    How much is the Aaism exam?

    AAISM exam cost depends on membership status and can change, so the best practice is to confirm current pricing on ISACA’s AAISM credential pages at the time you register. ISACA typically offers a lower exam fee for members and a higher fee for non-members, and there may be additional costs such as an application processing fee after you pass, plus ongoing annual maintenance fees and continuing professional education requirements to keep the certification active. When budgeting, also include optional preparation costs such as study guides, official training, and practice questions. If you are deciding whether to become a member, compare the membership fee plus member exam price against the non-member exam price. In many cases, membership reduces total cost, especially if you plan to pursue multiple ISACA credentials. For SEO, present the cost as a full breakdown: exam fee, application fee, annual maintenance, CPE time investment, and optional training.

    What is the passing score for the Aaism exam?

    ISACA typically uses scaled scoring and does not always publish a simple “percentage” passing score for every credential. The safest, most accurate approach is to follow ISACA’s official scoring guidance for AAISM and interpret your results according to the scaled score report provided after the exam. Scaled scoring helps ensure fairness across different exam forms by normalizing difficulty. From a practical perspective, you should prepare to exceed the minimum by aiming for strong performance across all domains rather than trying to “hit a number.” Build readiness through domain-by-domain study, practice questions, and reviewing incorrect answers to understand reasoning. If you need an exact pass threshold, consult the official AAISM exam documentation because third-party figures may conflict.

    Stay Career-Ready by Renewing Your AAISM Certification

    Renewing your AAISM certification isn’t just about keeping a credential. It’s an opportunity to gain real, career-boosting benefits. Every CPE you earn, every ethics requirement you follow, and every activity you log helps you stay sharp, relevant, and trusted in AI security leadership. What if you missed the renewal deadline or haven’t taken the AAISM exam yet? You can turn what you know now into a chance to refresh your knowledge, strengthen your skills, and solidify your leadership credibility.

    Destination Certification’s online 3-day AAISM bootcamp makes this process seamless. Bootcamp instructors bring specialized expertise in AI governance, federal privacy law, and regulatory compliance. With hands-on experience developing AI governance frameworks and teaching cybersecurity at the highest levels, they transform complex AI security concepts into practical strategies you can apply immediately in your organization.

    By pairing your efforts with this structured training, you not only earn CPEs but also build the discipline of learning something new that will advance your cybersecurity career. 

    Rob is the driving force behind the success of the Destination Certification CISSP program, leveraging over 15 years of security, privacy, and cloud assurance expertise. As a seasoned leader, he has guided numerous companies through high-profile security breaches and managed the development of multi-year security strategies. With a passion for education, Rob has delivered hundreds of globally acclaimed CCSP, CISSP, and ISACA classes, combining entertaining delivery with profound insights for exam success. You can reach out to Rob on LinkedIn.

    Image of Rob Witcher - Destination Certification

    Rob is the driving force behind the success of the Destination Certification CISSP program, leveraging over 15 years of security, privacy, and cloud assurance expertise. As a seasoned leader, he has guided numerous companies through high-profile security breaches and managed the development of multi-year security strategies. With a passion for education, Rob has delivered hundreds of globally acclaimed CCSP, CISSP, and ISACA classes, combining entertaining delivery with profound insights for exam success. You can reach out to Rob on LinkedIn.

    Certification in 3 Days 


    Study everything you need to know for the AAISM exam in a 3-day bootcamp!

    The fastest path to get AI Security Certified. Join our bootcamp


    Our bootcamp isn't just about getting you to pass—it's about developing the AI security expertise that organizations desperately need.

    CISM Bootcamp ad - Destination Certification

    Weekly Newsletters

    Icon of CISSP DestCert weekly - Destination Certification

    Get a weekly dose of cybersecurity wisdom.