The first credential purpose-built for AI security governance launched quietly in August 2025 (and it requires you to already hold a CISM or CISSP just to sit the exam. That prerequisite tells you everything about who ISACA built the AAISM for: senior security leaders who need formal, defensible expertise in securing AI systems, not analysts still building foundational skills. With the BLS projecting 33% growth for information security analyst roles from 2023 to 2033, the window to differentiate at the executive level is wide open).

What Is ISACA AAISM AI Security Management Certification: AI Security Governance & Career Leadership 2026 Certification?

ISACA’s Advanced in AI Security Management (AAISM) is a post-experience, post-certification credential issued by ISACA (the same organization behind CISM, CRISC, and CISA. It launched in August 2025, making it one of the newest credentials in the security market, and it’s built specifically for professionals who manage AI systems, govern AI risk, and lead AI security programs at the organizational level).

What sets AAISM apart isn’t the subject matter alone (it’s the eligibility gate. You must hold an active CISM or CISSP before you can register. That filters the candidate pool to experienced security managers and architects, not early-career practitioners. There’s no path around it and no associate-level equivalent).

Because the cert launched less than a year ago, independent holder counts and salary survey data don’t yet exist. What does exist is a complete official preparation ecosystem from ISACA and boot camp offerings from Infosec Institute, Learning Tree, and Training Camp (suggesting market uptake is real and growing fast).

Who Should Get ISACA AAISM Certified?

AAISM fits a specific kind of professional. Here are four profiles that match well:

CISM-certified security managers moving into AI oversight. If you’re already governing enterprise security programs and your organization is deploying machine learning models, AAISM formalizes the specialized expertise you’re being asked to develop on the job.

CISOs and security directors at AI-native companies. Organizations building AI products need security leaders who can speak governance and risk in AI-specific terms. AAISM gives you documented credentialing in a space where almost none exists yet.

CISSP-holders pivoting toward AI risk and governance roles. If you came up through architecture or engineering and you’re targeting AI GRC or AI security strategy, AAISM bridges technical depth with management-level governance.

Who shouldn’t pursue it: Anyone without an active CISM or CISSP is ineligible (full stop. Professionals still building foundational security experience, or those primarily interested in hands-on AI engineering rather than governance and oversight, will find better options elsewhere).

ISACA AAISM Exam Domains and Weights

The AAISM exam covers three domains with published weights: AI Governance and Program Management (31%), AI Risk Management (31%), and AI Technologies and Controls (38%). The heaviest domain focuses on practical AI security architecture, model lifecycle security, and monitoring controls. The 90-question exam tests across 22 task statements spanning all three domains. The widget below breaks down each domain and the specific skills tested.

ISACA AAISM Exam Cost, Format, and Pass Score

Exam fees run $459 for ISACA members and $599 for non-members, plus a $50 application processing fee (so total investment before study materials starts at $509 to $649. Add official prep resources and third-party boot camps and your all-in range shifts significantly. The widget below maps every cost tier so you can plan your actual budget).

ISACA AAISM Salary and Job Outlook 2026

AAISM-specific salary data doesn't exist yet (the cert launched in August 2025 and hasn't appeared in established salary surveys. The most reliable proxies are CISM holders, who report a median of $155,000 in the Skillsoft 2025 IT Skills and Salary Report and $133,569 median at PayScale. Given AAISM's AI specialization on top of those prerequisites, compensation at or above those benchmarks is a reasonable expectation. The widget maps the full salary landscape by role and experience tier).

ISACA AAISM Requirements: Experience and Eligibility

The eligibility bar is unusually high. You must hold an active CISM or CISSP before you can register for the AAISM exam (no exceptions, no waivers, no associate path. That means you've already cleared at minimum five years of professional security experience (CISM's requirement) or demonstrated a broad technical security body of knowledge (CISSP's bar)).

Once you pass the exam, you submit a certification application with a $50 processing fee. Maintenance requirements mirror ISACA's standard continuing education model (annual CPE minimums apply to keep the credential active).

There are no published experience substitutions for AAISM the way CISM offers waivers for CISA holders or degree earners. The prerequisite credential is the prerequisite (it can't be substituted).

Timeline expectations vary by where you're starting. If you already hold CISM and work in a role with AI security exposure, you could be credentialed within a few months of intensive study. If you're still pursuing your prerequisite cert, add that timeline first.

How to Study for ISACA AAISM: Resources and Study Plan

ISACA's official prep suite covers the full range from free practice questions through a complete Online Review Course ($449 member / $549 non-member). Third-party boot camps from Infosec Institute ($2,999) and Learning Tree ($2,995) offer structured instructor-led options. The resource navigator and study plan builder below filter by format, budget, and timeline.

What Changed in the ISACA AAISM 2026 Update

There's no 2026 update to report because the AAISM itself launched in August 2025 (it's still in its first content cycle. No revised exam outline has been announced as of this writing).

That said, candidates preparing now should watch the ISACA credentialing page closely. The underlying CISM content outline (which informs some AAISM domain overlap) is due for a revision effective November 3, 2026, with updated preparation materials expected in September 2026 according to ISACA's official announcement. Whether the AAISM outline adjusts in tandem hasn't been confirmed.

Current study materials are based on the launch-version exam content. If you're preparing for a 2026 exam date, your existing ISACA-published resources are current. If you're planning a 2027 attempt, verify with ISACA whether a content update is pending before purchasing prep materials.

How AI Is Changing Security Management Careers

AI isn't replacing CISM or AAISM holders (it's redefining what they manage. Routine tasks like log analysis and vulnerability scanning are increasingly automated, which shifts the senior security manager's focus toward AI system governance, risk interpretation from AI-generated outputs, and compliance in AI-augmented environments).

That shift creates a skills gap most organizations haven't filled. Professionals who can translate AI risk into business terms, govern AI model deployments, and maintain accountability frameworks around automated decision systems are scarce. AAISM exists precisely to credential that capability.

The BLS projects 33% job growth for information security analysts from 2023 to 2033. AI adoption accelerates that demand specifically at the governance and strategy layer (the layer AAISM addresses. This isn't speculation; financial services, healthcare, defense, and technology companies are all building AI security functions and struggling to find leaders who can run them).

Is ISACA AAISM Worth It in 2026?

Yes (if you already hold CISM or CISSP and your career is pointing toward AI security leadership. It's the only management-level credential purpose-built for this space, and early movers in emerging specializations consistently outperform on compensation once the market catches up. The most relevant competitor is CISSP, which overlaps on governance depth but doesn't specialize in AI. The comparison widget breaks down how AAISM stacks up across key metrics).

How to Get ISACA AAISM Certified: Step by Step

1. Confirm you hold an active CISM or CISSP in good standing.
2. Review the official exam content outline at isaca.org/credentialing/aaism.
3. Select your prep path (ISACA's Official Review Course, a third-party boot camp, or self-study with the QAE database).
4. Register for the exam through ISACA at $459 (member) or $599 (non-member).
5. Pass the exam and submit your certification application with the $50 processing fee.
6. Complete annual CPE requirements to maintain the credential.

AAISM is early-stage, but so is the AI security governance field (that's the point. If you're a senior security leader and AI systems are already in your environment, visit isaca.org/credentialing/aaism and explore the TechJacks certification hub for related resources).

Reference Resource List

1. ISACA AAISM Credentialing Page
2. ISACA CISM Credentialing Page
3. ISACA CISM Exam Content Outline
4. U.S. Bureau of Labor Statistics (Information Security Analysts Outlook
5. Skillsoft IT Skills and Salary Report 2025
6. PayScale (CISM Certification Salary)
7. ISC2 CISSP Certification
8. Infosec Institute AAISM Boot Camp
9. Learning Tree AAISM Certification Course
10. Training Camp ISACA AAISM Boot Camp