What Is Advanced in AI Audit (AAIA)?

Overview

Advanced in AI Audit (AAIA) is a ISACA credential. ISACA AAIA exam prep for active CISA holders and other qualified auditors. Covers AI governance and risk, AI operations, and AI auditing tools and techniques. This PathKey™ guide summarizes the domains, format, cost signals, eligibility, and renewal pattern so you can decide before you book. Accumentum is an Army CA and Air Force COOL Approved Vendor. We teach preparation for the ISACA exam. ISACA sets exam content, fees, and policies.

Accumentum is an Army CA and Air Force COOL Approved Vendor. We teach preparation for the ISACA exam. ISACA sets exam content, fees, and policies.

Who it is for

• IT auditors and audit managers who hold an active CISA and are asked to audit AI systems.
• Internal auditors and accountants with a qualifying designation, such as CIA or CPA, who work in an IT audit or IT advisory role.
• Risk and compliance advisors who assess, implement, maintain, or audit AI systems.

Exam domains

Weights follow the official outline.

1. 01

   AI Models, Considerations, and Requirements

   Maps to ISACA Domain 1, AI Governance and Risk (33%), Explain AI and machine learning models, their inputs and outputs, and what an auditor needs to know about how they are built, and Evaluate AI solutions to advise on impact, opportunities, and risk to the organization.

2. 02

   AI Governance and Program Management

   Maps to ISACA Domain 1, AI Governance and Risk (33%), Review the organization's AI policies and procedures, including compliance with legal and regulatory requirements, and Confirm that the organization has defined ownership of AI-related risk, controls, procedures, decisions, and standards.

3. 03

   AI Risk Management

   Maps to ISACA Domain 1, AI Governance and Risk (33%), Assess the role and impact of AI decision-making systems on the organization and its stakeholders, and Review vendor and supply chain management programs specific to AI solutions.

4. 04

   Privacy, Data Governance, Ethics, and Standards

   Maps to ISACA Domain 1, AI Governance and Risk (33%), Review the organization's privacy program and data governance program as they apply to AI, and Assess data input requirements for AI models, including data appropriateness, bias, and privacy.

5. 05

   Data Management and the AI Solution Life Cycle

   Maps to ISACA Domain 2, AI Operations (46%), Audit data management specific to AI, from data sourcing and preparation to retention, and Assess the AI solution life cycle, including design, development, deployment, monitoring, and decommissioning, for compliance and risk.

6. 06

   Change Management and Supervision of AI Solutions

   Maps to ISACA Domain 2, AI Operations (46%), Evaluate the organization's change management program specific to AI, and Review the configuration management program and the identity and access management program specific to AI.

7. 07

   Testing Techniques for AI Solutions

   Maps to ISACA Domain 2, AI Operations (46%), Review testing techniques used for AI solutions before and after deployment, and Evaluate whether testing covers accuracy, bias, and the data used to train and run the model.

8. 08

   AI Threats, Vulnerabilities, and Incident Response

   Maps to ISACA Domain 2, AI Operations (46%), Identify threats and vulnerabilities specific to AI, and Assess the organization's threat and vulnerability management programs specific to AI.

9. 09

   AI Audit Planning, Testing, and Evidence

   Maps to ISACA Domain 3, AI Auditing Tools and Techniques (21%), Plan and design an audit of an AI system or AI program, including scope and objectives, and Choose audit testing and sampling methods that fit AI systems.

10. 10

    Audit Data Analytics, Reporting, and AI-Enabled Audit

    Maps to ISACA Domain 3, AI Auditing Tools and Techniques (21%), Check audit data quality and apply data analytics in AI audits, and Write AI audit outputs and reports that give stakeholders clear findings and recommendations.

Exam format and cost

Questions

Confirm on the vendor site

Duration

Confirm on the vendor site

Format

Multiple choice and related item types (confirm on the vendor outline)

Passing score

Confirm the passing score on the vendor site

Cost

Confirm the current exam fee on the vendor site before you register

Delivery

Vendor-approved test center or online proctoring (confirm on the vendor site)

Languages

Confirm available languages on the vendor site

Experience and eligibility

ISACA requires AAIA candidates to hold an active CISA or an active designation from ISACA's qualified list. Holders of designations other than CISA qualify when they work in an IT audit or IT advisory role. Confirm your eligibility on isaca.org before you register. The course assumes working knowledge of IT audit practice at the CISA level, including audit planning, controls testing, evidence, and reporting.

Renewal

Renewal rules for Advanced in AI Audit (AAIA) are set by ISACA. Many credentials use a multi-year cycle with continuing education, a renewal fee, or a newer exam. Confirm the current cycle on the vendor site.

Roles this credential fits

• AI governance and risk, AI operations, and AI auditing tools and techniques, mapped to ISACA's three AAIA exam domains, for IT auditors and advisors who already hold an active CISA or another designation ISACA accepts.
• AI Audit
• Teams standardizing on this credential for hiring or compliance

Official sources

• ISACA credentialing

Always confirm fees, dates, and eligibility on the vendor site before you register. Vendors change outlines and prices without notice.