Whether the AAIA is worth it depends on one thing more than any other: whether your audit work is turning toward AI. ISACA built the credential for auditors who already hold a CISA or a comparable audit or accounting designation and are being asked to give assurance over the AI their organizations adopt. This guide sets out what ISACA publishes about the AAIA, what its own research says about the gap the credential is aimed at, what it costs to earn and keep, and the questions to answer before you register.
The short answer
- It is worth it if AI is entering your audit plan. ISACA introduced the AAIA as "the first advanced audit-specific artificial intelligence certification designed for experienced auditors".
- It builds on a credential you already hold. You need a CISA, or one of a list of audit and accounting designations with an IT audit or IT advisory role, and you must keep that credential active to keep the AAIA.
- No AAIA salary is published. ISACA prints an average salary for the CISA, not for the AAIA, and no job count for either.
- ISACA's own 2026 survey shows the gap auditors are being asked to test: only 38 percent of organizations have a formal, comprehensive AI policy, and only 36 percent of respondents say humans approve most AI-generated actions before execution.
- It costs US$459 or US$599 for the exam, plus US$50 to apply, and then a yearly fee of US$20 or US$35 and at least 10 hours of AI continuing education a year.
What is the AAIA certification?
The AAIA, Advanced in AI Audit, is ISACA's AI credential for auditors. ISACA's launch announcement of May 19, 2025 described it as "the first advanced audit-specific artificial intelligence certification designed for experienced auditors", one that "validates expertise in conducting AI-focused audits, addressing AI integration challenges, and enhancing audit processes through AI-driven insights."
The exam covers three domains: AI Governance and Risk (33%), AI Operations (46%) and AI Auditing Tools and Techniques (21%). Like ISACA's other advanced AI credentials, it is "2.5 hours (150 minutes), 90 multiple choice questions". Our guide to AAIA certification requirements covers every step from the exam to the certificate.
Who is the AAIA for?
ISACA's AAIA page is specific: "To qualify for AAIA, candidates must either hold a CISA certification or one of the following designations with an IT audit or IT advisory role focus: CIA, US CPA, ACCA or FCCA, Canadian CPA, Australian CPA or FCPA or the Japanese CPA designation." The candidate guide's own list runs further, to the ICAEW, CA ANZ, Hong Kong and Nigerian accounting bodies among others.
So the AAIA is not a first credential. It is a second layer for people who already audit: IT auditors, internal auditors and accountants in assurance and advisory roles. If you hold none of the listed credentials, the AAIA is closed to you until you do.
Is the ISACA AAIA certification worth it?
Four questions decide it, and the answers are yours, not ISACA's.
Is AI in your audit plan? If your organization, or your clients, are putting models into lending, hiring, pricing, claims or customer service, someone will be asked to give assurance over them. The AAIA certifies that you can: in the launch announcement's words, auditors who "can navigate the complexities of AI, demonstrating they have the skills to respond to risks, identify opportunities, and ensure compliance".
Do you already hold the prerequisite? If you hold a CISA, the AAIA builds directly on it: the same exam format, the same body, and continuing education that ISACA says may count toward both. If you would need to earn a CISA first, the AAIA is a longer road.
Is audit the right lens? ISACA has separate AI credentials for other roles: its 2026 survey release lists "three new credentials: Advanced in AI Audit (AAIA), Advanced in AI Security Management (AAISM) and Advanced in AI Risk (AAIR)". A security manager may be better served by the AAISM, and a governance professional by the IAPP's AIGP. Our AAISM vs AAIA vs AAIR and AIGP vs ISACA's AAIG, AAISM and AAIA compare them.
Will you keep it up? The AAIA asks for AI continuing education every year, on top of what your prerequisite credential asks for. If AI is a passing interest rather than part of your work, the upkeep will feel like a cost rather than a benefit.
What does ISACA's research say about demand?
ISACA's case for its AI credentials rests on surveys of digital trust professionals. Its AAIA launch announcement cited one: "85 percent of digital trust professionals, including auditors, say they will need to increase their skills and knowledge in AI within two years to advance or retain their job".
The 2026 AI Pulse Poll, with responses from "more than 3,400 digital trust professionals across IT audit, governance, cybersecurity, privacy and emerging technology roles", is more specific about the gaps an AI auditor would test. From ISACA's releases of March 23 and May 5, 2026:
- Policy: "only 38 percent of organizations have a formal, comprehensive AI policy".
- Oversight: "only 36 percent of respondents saying humans approve most AI-generated actions before execution", and 20 percent "do not know how humans oversee AI decision-making at their organization".
- Accountability: asked who is responsible if an AI system causes harm, "20 percent admit that they do not know where the responsibility would lie".
- Incidents: only "43 percent" have high confidence in their organization's ability to investigate and explain a serious AI incident to leadership or regulators.
- Skills: "78 percent saying AI skills are very or extremely important to their profession", up from 72 percent the year before.
Each of those is a control an auditor could test and report on. In our reading, that is the strongest case for the credential: the gaps are wide, and someone has to give the assurance. The poll does not, however, measure the AAIA's effect on anyone's career, and we do not claim it does.
The exam also expects you to keep up with rules that change. The EU's AI Act is a good example: its high-risk dates moved in 2026, and a finding has to use the dates in force.
What is the AAIA salary?
ISACA does not publish one. Its CISA page prints a figure for the CISA, "US$149K+ AVERAGE ANNUAL SALARY", but its AAIA page and candidate guide give no salary for the AAIA, and we found no figure from ISACA for it. Any AAIA salary you see elsewhere is someone's estimate, and the AAIA is held only by people who already hold another credential, so separating its effect from theirs would be hard in any case.
Are there AAIA jobs?
ISACA publishes no count of jobs that ask for the AAIA, and a credential launched in May 2025 is unlikely to appear in many job descriptions by name yet. What the 2026 poll does report is intent: "36 percent say their organization will increase AI-related jobs in the next 12 months, up from 31 percent in 2025". For an auditor, the more useful signal is inside your own organization: whether AI systems are entering the audit universe, and whether anyone is qualified to audit them.
What the AAIA costs to earn and keep
| Item | ISACA's figure |
|---|---|
| Exam | US$459 for members, US$599 for nonmembers |
| Application for certification | US$50 |
| Annual maintenance fee | US$20 for members, US$35 for nonmembers |
| Continuing education | At least 10 hours a year, 30 over three years, in AI |
| Prerequisite | Your CISA or other qualifying credential, kept active |
The maintenance page is specific about the education: "A minimum of 10 CPE must be attained and reported annually", in "the specialized domain (AI)", and "You must earn and report a minimum of thirty (30) CPE hours for a three-year reporting period." It also says those hours may count toward other ISACA certifications they satisfy. The fee is due each year by January 1. Preparation is extra and optional; every AAIA fee, ISACA's prep products among them, is set out separately.
Questions to answer before you register
- Will you audit AI systems, or advise on them, in the next year or two?
- Do you hold an active CISA or one of the other qualifying credentials?
- Can you commit about 29 hours of study, our course's estimate, before your six-month window from registration runs out?
- Will you keep up 10 hours a year of AI continuing education?
- Is audit the right lens for your AI work, or would a security, risk or governance credential fit better?
If the first two answers are yes, the AAIA is the credential ISACA built for you.
Where to start
Try the content before you decide. A free account opens AI models and requirements in full, lessons, questions and flashcards, which shows both what the exam asks and whether the subject holds your interest. How hard is the AAIA exam sets out what makes it demanding, and full access to the whole course is a single payment with nothing to renew. For ISACA's security credential, see is the AAISM worth it.
By QualExam editorial. Written against the certifying body’s published documents, pinned by hash so a revised edition shows up as a change.