AAISM study resources

AAISM sits between security management and AI. Its largest domain is AI Technologies and Controls at 38%, so it demands more technical grounding than the other two ISACA AI certificates — but the reasoning it rewards is still managerial: which control removes an attack’s mechanism, and how you would evidence that it operates.

Start with the official material

ISACA’s study material for the certificate, which is the only resource written directly to this syllabus.

The domain weighting. AI Technologies and Controls 38%, AI Governance and Program Management 31%, AI Risk Management 31%. Notice that the technical domain is the largest — this is not a pure governance exam.

Free material worth reading

The AI security field publishes openly and the primary sources are excellent:

• The OWASP Top 10 for LLM applications. Covers prompt injection, excessive agency, insecure output handling and training data poisoning. This maps onto the technologies and controls domain directly and is free.
• MITRE ATLAS. Structured catalogue of adversarial techniques — model extraction, membership inference, evasion, poisoning. The exam expects you to name these correctly.
• The NIST AI Risk Management Framework for the governance and risk domains.

Reading these three covers a substantial share of the exam at no cost.

The reasoning the exam rewards

AAISM has clear preferences:

• Remove the mechanism, do not merely detect it. Isolating retrieved content from the instruction channel beats filtering for suspicious keywords.
• Enforce at the right layer. Tenant scoping belongs at retrieval and authorisation, before content reaches the model. A system prompt asking the model to respect tenancy is not a control.
• Constrain capability, not just behaviour. Least-privilege tool scoping caps what a manipulated agent can do, regardless of how it was manipulated.
• Keep secrets out of reach entirely. Not instructing the model to keep them.
• Log for investigation without creating a new target. Metadata and references with sensitive content redacted, rather than full prompts retained indefinitely.

Internalise those five and a large share of the technical domain answers itself.

Worth paying for

ISACA membership, which usually offsets itself against the exam fee.

A practice test for diagnosis. The free 20-question test here is weighted to the published domains.

What to skip

Model building. You will not be asked to train anything.

Braindumps.

Material that assumes no security background. This exam does not teach security management. If you are not already doing the job, the CompTIA path is the honest route in.

A sensible order

1. Read the syllabus and note that technologies and controls is the largest domain at 38%.
2. Read OWASP’s LLM Top 10 and MITRE ATLAS.
3. Work through the official material for the governance and risk domains.
4. Read the NIST AI RMF.
5. Take the practice test and see whether the technical or managerial questions cost you more.

AAISM or SecAI+?

If your output is decisions and policy, AAISM. If it is configurations and threat models, CY0-001 fits better. AAISM vs SecAI+ works through the distinction properly.