How to study for the AAIA: a plan by domain

The best way to study for the AAIA is to let ISACA's exam content outline set the order and its domain shares set the hours: AI Governance and Risk at 33%, AI Operations at 46% and AI Auditing Tools and Techniques at 21%. AAIA candidates already hold an audit credential, so the audit half of the exam is familiar ground; the new learning is AI itself, and how an auditor applies judgment to it. This guide gives a 4-week plan built on our course's hours, shows how to practice the exam's format, and says what ISACA sells for preparation.

The short answer

• Study by the outline. Three domains and 17 topics, in ISACA's order, with the hours split by the shares: 33%, 46% and 21%.
• Plan on about 29 hours. That is our course's estimate: about 3 hours of reading, 21 of practice and 5 for two timed mocks. At about 7 hours a week, that is 4 weeks.
• Weight AI Operations. At 46%, it is nearly half the exam and the domain furthest from a traditional audit background.
• Practice the format. Four options, one best answer, 90 questions in 150 minutes.
• Mind the window. Registering gives you six months to take the exam, so plan the study before you register.

Start with the outline, not a book

ISACA's candidate guide prints the AAIA's exam content outline in its appendix, and it is the only document that says what the exam covers. It lists three domains and 17 topics, and it gives each domain a share of the exam but the topics none of their own. Our guide to the AAIA exam content outline walks through all 17.

Two things follow for a study plan. First, the domain shares are the best guide to proportion you have. Second, the score is one total: in the guide's words, "Exam scores are based on the total number of exam items answered correctly, regardless of domain." A weak domain costs you the questions it holds, not a separate passing score, so spend your hours where the questions are.

How many hours, and how to split them

ISACA's candidate guide gives no figure for study time. Our course's estimate for the AAIA is about 29 hours: about 3 hours of reading across 18 lessons, 21 of practice with the 619 questions and flashcards that go with them, and 5 for two timed mocks. Your own figure depends on how much AI you already know. A CISA who has never looked inside a model will need the full estimate for the AI topics; a data scientist turned auditor may need less.

Split the 24 hours of reading and practice by the domain shares:

The split is ours, built on ISACA's shares. Domain 3 gets the fewest hours, and for most AAIA candidates it is also the most familiar: planning, testing, sampling, evidence and reporting are what an auditor already does. Domain 2, with seven topics from data management to incident response, is where the AI is.

A 4-week AAIA study plan

At about 7 hours a week:

Start week 1 with topic 1A, AI models, considerations and requirements: its first lesson covers how AI systems are built and how they fail, at an auditor's depth, and everything later assumes it. In each topic, read the lesson first, then answer its questions until the rationales stop surprising you, then review its flashcards on later days.

Fewer weeks, or more

• Short on time? At about 15 hours a week, the same plan fits in 2 weeks. Keep the order and the split.
• Studying around a full-time job? At about 5 hours a week, it takes about 6 weeks.
• The six-month window from registration is about 26 weeks, so even a slow plan fits, if you register when your plan says you are close.

Practice the format, not only the content

Knowing the material is half of the AAIA; the other half is choosing one best answer out of four, 90 times, on one clock. The guide describes the format plainly: "Every question has a stem (question) and four options (answer choices)", and "All questions are designed with one best answer." It adds that "An exam question may require you to choose the appropriate answer based on a qualifier, such as MOST likely or BEST."

Three habits make the difference:

1. Read the stem for the qualifier before you read the options. The guide's first tip is to "Read each question carefully."
2. Eliminate, then choose. The guide tells you to "eliminate known incorrect answers and then make the best choice possible." Usually two options fall away quickly; the work is between the last two.
3. Learn why the wrong answers are wrong. On a best-answer exam, the wrong options are often true statements that answer a different question. A rationale that explains each option teaches more than a bare answer key. AAIA exam questions has three more original examples.

For an auditor, the AI questions have a particular shape: they rarely ask what a technique is, and usually ask where a failure enters and what control or evidence would catch it.

Finish with timed mocks

The AAIA is "2.5 hours (150 minutes), 90 multiple choice questions", 100 seconds a question, and the one break does not stop the clock: "Your exam will be paused, but the timer will not stop during your approved break." Your last week should include two full mocks under those conditions, so the pace is familiar before it counts.

Use each mock for more than a score. Review every wrong answer, note which domain and topic it came from, and spend your remaining days on the topics that cost you the most. ISACA's own score report gives domain results, but "Domain level results are provided for informational purposes only", so a mock is the place to find a weak domain while there is still time to fix it. To pass, the guide says, "You must receive a score of 450 or higher"; our guide to AAIA format and scoring explains the scale.

Five mistakes that cost AAIA candidates time

1. Memorizing instead of applying. ISACA says its questions are "developed with the intent of measuring practical knowledge and the application of general concepts and standards". Definitions are the start: practice choosing what an auditor would conclude or do.
2. Skimping on Domain 2. It holds nearly half the exam in seven topics, and it is where most of the AI is.
3. Leaning on audit experience alone. Domain 3 will feel familiar, but its questions apply audit methods to AI: sampling a model's decisions, evidence from logs, reporting on systems you cannot fully explain.
4. Taking the exam too early. A retake costs the full fee again, and the second attempt has to wait 30 days; every AAIA fee is listed separately. An extra week of study is cheap by comparison.
5. Practicing from shared exam content. ISACA's rules forbid candidates to share or discuss "any exam content to any person or entity before, during or after the Exam", and the consequences the guide lists include "Voiding of exam" and being "Banned from taking any ISACA exam". Practice with original questions written to the outline instead.

ISACA's own AAIA prep

ISACA sells preparation of its own, listed on its AAIA page:

• the AAIA Review Manual, in digital and print versions, "A comprehensive reference guide to prepare for the AAIA certification exam";
• the AAIA Questions, Answers & Explanation Database, six months of access to "a comprehensive 200+ question database";
• the AAIA Online Review Course, which ISACA says "provides on-demand instruction and in-depth exam preparation";
• an AAIA virtual workshop, an "in-depth virtual training event that covers key concepts and content included in the AAIA certification exam".

ISACA also runs AAIA study groups on its Engage community, a "member-exclusive online forum", and offers a free AAIA practice exam of "12 free questions" on its site. These are ISACA's products, priced on its store and separate from the exam fee. Our course does not use them, and nothing in it is drawn from them. AAIA training compares them with self-study, prices included.

Is there an AAIA study guide PDF?

ISACA publishes the exam candidate guide as a free PDF, and it is the document behind most of this page. It covers registration, exam day, scoring and the rules, and it prints the exam content outline in its appendix, but it does not teach the content. The review manual is a separate book that ISACA sells. A file offered as a free download of a paid ISACA book did not come from ISACA. The AAIA study guide and review manual covers the book's versions and the free sources beside it.

The week of the exam

• Check your ID. It must be "current, valid, and original" and government-issued, with your name, signature and photograph, and the name must match your registration.
• Plan the day. At a test center, "Plan to arrive at least 30 minutes prior to the exam start time"; being more than 15 minutes late forfeits the appointment. Testing from home, run ISACA's compatibility check before exam day. Candidates in India, Mainland China and Hong Kong test at centers only.
• Watch the tutorial. "A tutorial of the exam taking experience will be provided" before the exam starts, and the guide asks you to pay close attention to it.
• Answer everything. "There are no penalties for incorrect answers", so never leave a question blank.
• Decide about the break in advance. A 10-minute break leaves 140 minutes for 90 questions, about 93 seconds each.

Where to start

Our AAIA course is built for this plan: 18 lessons mapped to the outline's 17 topics, 619 practice questions in the exam's format with a rationale that explains the right answer and why each wrong one falls short, 549 flashcards on a spaced schedule, and a mock of 90 questions on one 150-minute clock that draws each domain at its share. Give it your exam date and it paces the plan to your weeks; take the short diagnostic, which asks about all 17 topics, and it reorders them by what you already know.

A free account opens AI models and requirements in full, lessons, questions and flashcards, so you can try the method before paying anything. The AAIA exam guide shows every topic and lesson, and full access is a single payment for 30 or 365 days, with nothing to renew. If you are weighing the AAIA against ISACA's security credential, how to study for the AAISM sets out the same method for it.