How hard is the AAISM exam?

The honest answer to how hard the AAISM exam is starts with what ISACA does not publish: a pass rate. ISACA's candidate guide gives none, so any percentage you meet on a forum or a prep site is somebody's estimate. What ISACA does publish is enough to judge the exam for yourself: who it is written for, how its questions are built, what its outline covers and how heavily, how it is scored, and what a failed attempt costs. This guide sets that out from ISACA's AAISM Exam Candidate Guide, its exam content outline and its AAISM pages, then takes each thing that makes the exam hard and says what to do about it.

The short answer

• No pass rate is published. The candidate guide gives none, and it says that "Question-level results cannot be provided", so no outside figure for the exam's difficulty is anything but an estimate.
• It is an advanced exam with a gate. Only holders of an active CISM or CISSP may take it, and ISACA says the credential "builds upon existing security management best practices found in CISM and CISSP".
• Every question asks for the best answer, not just a correct one. There are four options, "All questions are designed with one best answer", and a qualifier such as MOST or BEST often decides between options that are each partly right.
• The heaviest domain is the most technical. AI Technologies and Controls is 38% of the exam, against 31% each for governance and for risk.
• 450 passes on a scale from 200 to 800, and 450 is not a percentage. ISACA publishes no conversion from questions answered correctly to the scaled score.
• No study hours are published. Our own plan for the AAISM comes to about 76 hours.
• A fail costs the full fee again. You have four attempts in a rolling 12 months, with a wait of 30 days before the second and 90 days before each after that.

Is the AAISM exam difficult?

ISACA's documents describe the exam; they do not rate it. What they describe is an exam for experienced people. The candidate guide says the credential is "Designed for IT security professionals with a CISM or CISSP certification looking to gain recognition for their expertise in securing enterprise AI solutions and leveraging AI to improve security operations." ISACA's AAISM page sets the condition: "AAISM candidates must hold an active CISM or CISSP certification." And the launch announcement describes who it fits best, "those with proven experience in security or advisory roles, and professionals with some expertise assessing, implementing and maintaining AI systems."

That shapes the difficulty. The AAISM does not start from zero. It takes for granted the security management thinking a CISM or CISSP holder already has, such as risk-based decisions, governance before tools, and the business as the reason for security, and asks you to apply it to AI. The guide says so in its description of the questions: "Exam questions are developed with the intent of measuring practical knowledge and the application of general concepts and standards." A candidate who knows the vocabulary of AI security but not how a security manager weighs options will find the questions harder than one who has run a security program and is new to AI.

So the AAISM is hard in the way an advanced management exam is hard: the questions describe a situation and ask what a security manager should do, and more than one option sounds reasonable. It is not hard in the way a hands-on technical exam is hard. There are no labs, no code to write and no essays; every question is multiple choice.

What is the AAISM pass rate?

Not published. The candidate guide, ISACA's AAISM page and its outline page contain no pass rate, and the guide adds that "Question-level results cannot be provided". Any site that states a pass rate for the AAISM is estimating from its own customers or inventing a number.

What ISACA does publish is how the result is expressed. "A scaled score is a conversion of a candidate's raw score on an exam to a common scale." ISACA uses a scale from 200 to 800, and "Candidates must receive a score of 450 or higher to pass the exam, which represents the minimum standard of knowledge." Two things are missing on purpose: the number of correct answers that equals 450, and how many of the 90 questions are pretest items, which the guide says "are not used to calculate exam scores". A page that turns 450 into a percentage is guessing.

What makes the AAISM hard

Five features of the exam, each from ISACA's own description.

The best answer, not a correct one. The guide is plain about the format: "Every question has a stem (question) and four options (answer choices)", and "All questions are designed with one best answer." Its first tip explains why that is hard: "A question may require you to choose the answer based on a qualifier, such as MOST likely or BEST." In an AAISM question, wrong options are rarely absurd. Several will be things a security manager might well do; the qualifier asks which one to do first, or which one does the most. The guide's second tip is the method: "Eliminate known incorrect answers and then make the best choice possible."

Three disciplines in one exam. The outline splits the AAISM into three domains with 13 topics under them and 22 tasks. Domain 1, AI Governance and Program Management, "demonstrates your ability to advise stakeholders on implementing AI security solutions through appropriate and effective policy, data governance, program management and incident response." Domain 2 "confirms your skill at assessing and managing risks, threats, vulnerabilities and supply chain issues related to the enterprise-wide adoption of AI." Domain 3 "focuses on optimizing AI security and highlights your knowledge of security technologies, techniques and controls tailored to AI systems." The tasks run from "Collaborate on charter, roles, and responsibilities for governance and management of AI to align with business objectives" to "Design and implement security architecture specifically for AI" and "Establish and maintain AI incident handling processes, including containment, notification, escalation, eradication, and recovery." Few candidates come to the exam strong in all three.

The heaviest domain is the technical one. Domain 3, AI Technologies and Controls, carries 38% of the exam, about 34 of the 90 questions, against about 28 for each of the other two. Its five topics are AI security architecture and design; the AI life cycle, with model selection, training and validation as ISACA's examples; data management controls; privacy, ethical, trust and safety controls; and security controls and monitoring. For a security manager whose daily work is policy and risk, this is often the least familiar ground, and it is the largest share of the score.

Frameworks the outline does not name. Topic 1A is "Stakeholder Considerations, Industry Frameworks, and Regulatory Requirements", and one task asks you to "Ensure the responsible use of AI by utilizing leading practices, ethical principles, regulatory requirements, and industry frameworks." The outline lists no framework by name. You have to decide which to learn, and the field keeps moving: OWASP published a 2026 edition of its Top 10 for LLM Applications on August 4, 2026, and the EU amended its AI Act by a regulation published on July 24, 2026, both after ISACA launched the AAISM in August 2025. Our framework guides take the main ones in turn: the NIST AI RMF, the OWASP Top 10 for LLM Applications, MITRE ATLAS and the EU AI Act.

One clock for 90 questions. The guide gives "2.5 hours (150 minutes); 90 multiple-choice questions", which is 100 seconds a question, and the one break you may take does not stop the timer. Its advice: "Budget your time. Pace yourself to complete the entire exam." Scenario questions take longer to read than definition questions, so the time goes faster than the arithmetic suggests. The AAISM exam format sets out the break, the pacing and the exam-day rules.

How long does it take to prepare for the AAISM?

ISACA gives no figure. Its candidate guide says that "ISACA offers a variety of exam preparation resources, including group training, self-paced training, and study resources in various languages, to help you prepare for the certification exam", but it does not say how many hours a candidate needs, and neither do its AAISM pages.

Our own estimate, built on our course, is about 76 hours: about 14 hours of reading, 57 of practice and 5 for two timed mocks, or 8 weeks at about 9.5 hours a week. Your number depends on where you start. Every candidate holds a CISM or CISSP, so the management thinking is usually familiar; the AI-specific threats, controls and rules are where most of the hours go. How to study for the AAISM splits the hours by ISACA's domain shares and lays them out week by week.

How is the AAISM exam scored?

On the total, then on a scale. The guide: "Exam scores are based on the total number of exam items answered correctly, regardless of domain." A hard question is worth what an easy one is, and no domain has its own passing score; your score report shows each domain, but "Domain level results are provided for informational purposes only."

There is also no penalty for guessing. The guide says that "There are no penalties for incorrect answers", so a blank answer is the only answer guaranteed to earn nothing. When you are unsure, rule out what you can, make the best choice left, and keep moving; a question you spend four minutes on costs you two others.

Your preliminary pass or fail shows on screen when you finish, and the official score follows by email within 10 working days. The AAISM exam format, scoring and passing score explains the scale in full.

How can I prepare for and pass the AAISM exam?

Each of the five hard features has an answer.

1. For the best answer, practice judging, not recalling. Questions in the exam's shape, with a rationale for why each wrong option is wrong, teach you to compare options the way the exam does. Read the stem for the qualifier first, then judge each option against it.
2. For the three disciplines, study by the outline. Work through all 13 topics in ISACA's order, and spend more time on your weakest domain rather than your favorite one. The AAISM exam content outline explained goes through every topic and task.
3. For Domain 3, give the controls their share. At 38%, it deserves the most hours. Learn what each control does and when a security manager would choose it, not how to build it.
4. For the frameworks, learn the main ones by their purpose. Know what the NIST AI RMF, the OWASP list, MITRE ATLAS and the EU AI Act are for, and which question each one answers, since the outline names none of them.
5. For the clock, rehearse it. Take at least one timed mock of 90 questions in 150 minutes before the exam, and practice keeping to about 100 seconds a question. Our mock runs on one 150-minute clock and draws each domain at its share, and AAISM practice exam explains how to take one and review it.

What happens if you fail?

ISACA's retake rules are in the guide: "Individuals have four attempts within a rolling 12-month period to pass the exam." After a first attempt that does not pass, you wait 30 days before the second, then 90 days after the second before the third, and 90 days after the third before the fourth. Each attempt is a new registration: "candidates must pay the registration fee in full for each exam attempt", which is US$459 for ISACA members and US$599 for nonmembers.

If you do not pass, you can also ask for a rescore within 30 days of the result, and "A fee of US$75 must accompany each request." The domain results on your score report are the best study plan for a second attempt, since the guide will not give you the questions you missed. Every fee, the retakes included, is set out in what the AAISM costs.

Where to start

The quickest way to judge the level is to try it. A free account opens the first topic, AI governance and regulation, in full: its 147 questions with rationales, its lessons and its flashcards, plus a short diagnostic and a study plan. AAISM exam questions: what they look like shows four more original questions with full rationales, and the AAISM practice page explains how the bank and the mock work. When you are ready for the rest, full access to all 1,717 questions is a single payment, with nothing to renew.