- Maps to ISACA Domain 1, AI Risk Governance and Framework Integration (37%).
- Understand the AI models, frameworks, and strategies an organization uses.
- Evaluate AI use cases against the organization’s risk appetite.
- Integrate AI risk management into the enterprise risk management framework.
ISACA Certification Training
Advanced in AI Risk™ (AAIR™) Certification Training Course
Bring AI into the risk program you already run. Accumentum prepares CRISC holders and other qualified risk professionals for ISACA’s Advanced in AI Risk (AAIR) exam.
Course focus: AI risk governance and framework integration, AI life cycle risk management, and AI risk program management, mapped to ISACA’s three AAIR exam domains, for risk professionals who already hold CRISC or another qualifying certification.
Course Overview
Govern, assess, and manage AI risk across the enterprise.
The Advanced in AI Risk™ (AAIR™) Certification Training Course with Accumentum prepares experienced IT risk professionals to govern, assess, and manage AI risk. ISACA launched AAIR on April 15, 2026, and it sits next to AAIA and AAISM in ISACA’s advanced AI credentials.
AAIR is not an entry-level credential. ISACA requires candidates to hold one of 25 qualifying certifications, such as CISA, CISM, CRISC, CGEIT, CDPSE, CISSP, CGRC, or PMI-RMP, and says it is built for people with proven experience in IT risk or advisory roles. For CRISC holders it is a natural next step.
The ten modules follow ISACA’s three AAIR exam domains: AI Risk Governance and Framework Integration (37%), AI Life Cycle Risk Management (21%), and AI Risk Program Management (42%).
Sessions stay at the risk program level: how AI risk fits the enterprise risk framework, how you assess and treat it, how you report it to leadership, and how you keep it inside risk tolerance.
Course Objectives
Build AAIR exam readiness and practical AI risk management skills.
01
Integrate AI into risk governance
Fold AI risk into the enterprise risk framework, risk register, policies, and control taxonomy.
02
Manage AI life cycle risk
Assess risk in AI design, procurement, training, testing, deployment, and decommissioning, including model drift.
03
Assess and treat AI risk
Identify AI risk scenarios, recommend treatment, and evaluate controls against the organization’s risk appetite.
04
Report and respond
Build AI risk metrics and reporting, manage AI supply chain risk, and include AI in incident response and continuity planning.
Who Should Attend
- CRISC holders and IT risk managers responsible for AI use in their organization.
- Audit, security, and GRC professionals who hold a qualifying certification and advise on AI risk.
- Risk directors who report AI exposure to leadership and boards.
- Professionals working with technology, legal, and data teams on AI deployment decisions.
Prerequisites
- ISACA requires AAIR candidates to hold one of its qualifying designations, such as CISA, CISM, CRISC, CGEIT, CDPSE, CISSP, CGRC, CIA, or PMI-RMP. Confirm your eligibility with ISACA before you register.
- ISACA says AAIR candidates should have proven experience in IT risk or advisory roles.
- The course assumes working knowledge of risk assessment, risk response, and control monitoring at the CRISC level, plus basic AI concepts.
- Training does not replace ISACA’s certification requirements. After passing the exam you must still apply to ISACA and meet its ethics and CPE rules.
Pathway Map
The AAIR training course covers all three ISACA domains across ten modules.
Every module opens with the exam domain it maps to, so you can see how the pieces fit together across the course.
Course Content
- Maps to ISACA Domain 1, AI Risk Governance and Framework Integration (37%).
- Define AI ownership, oversight, and accountability.
- Develop AI risk policies, procedures, roles, and acceptable risk tolerance levels.
- Build AI risk concepts into enterprise awareness training with stakeholders.
- Maps to ISACA Domain 1, AI Risk Governance and Framework Integration (37%).
- Assess compliance with AI-related laws, regulations, frameworks, and standards.
- Address trustworthiness, ethics, bias, privacy, safety, and ESG impacts.
- Advise on AI risk in contracts and service agreements, including data use and intellectual property.
- Maps to ISACA Domain 2, AI Life Cycle Risk Management (21%).
- Assess risk in AI design, development, procurement, and documentation.
- Evaluate suitability, algorithms, and training approaches.
- Bring AI risk into the change management process.
- Maps to ISACA Domain 2, AI Life Cycle Risk Management (21%).
- Review risk in model training, testing, and validation.
- Monitor drift and other changes across the AI life cycle.
- Manage AI data and asset risk.
- Maps to ISACA Domain 2, AI Life Cycle Risk Management (21%).
- Assess risk during implementation, maintenance, and decommissioning.
- Assess human oversight controls at critical decision points.
- Plan for model retirement and data disposal.
- Maps to ISACA Domain 3, AI Risk Program Management (42%).
- Identify AI risk scenarios, including threats, vulnerabilities, and attacks.
- Conduct risk assessments that classify AI risk.
- Evaluate threat and vulnerability assessments on AI projects.
- Maps to ISACA Domain 3, AI Risk Program Management (42%).
- Develop and recommend treatment strategies for identified AI risk.
- Evaluate, select, and validate controls that keep AI risk within tolerance.
- Integrate AI risk into existing control taxonomies.
- Maps to ISACA Domain 3, AI Risk Program Management (42%).
- Capture AI risk in enterprise metrics and reporting for boards, management, and operations.
- Keep watching for new and emerging AI risk.
- Use AI to support the risk program, from risk profiles to analysis.
- Maps to ISACA Domain 3, AI Risk Program Management (42%).
- Evaluate AI risk in the supply chain and third-party resources.
- Integrate AI risk scenarios into enterprise incident management.
- Include AI in BIAs, business continuity plans, and disaster recovery plans.
Course Features
Designed for risk professionals preparing for the ISACA AAIR exam.
Instructor-Led Sessions
Live virtual sessions with instructors focused on AI risk governance, assessment, and treatment decisions.
Risk Scenarios
Case studies that ask what a risk professional should assess, recommend, or report when AI enters the business.
Domain-Mapped Materials
Study materials organized by ISACA’s three AAIR domains and their published weights.
Exam Readiness Review
Review of the exam structure, domain coverage, and ISACA-style question stems before you schedule.
Certification Exam
Prepare for the ISACA Advanced in AI Risk exam.
AAIR Exam Readiness
Accumentum’s AAIR course prepares qualified risk professionals to govern, assess, and manage AI risk across all three ISACA domains.
ISACA launched the Advanced in AI Risk (AAIR) certification on April 15, 2026. It joins AAIA and AAISM in ISACA’s set of advanced AI credentials.
The AAIR exam has 90 multiple-choice questions and runs 2.5 hours. It covers three domains: AI Risk Governance and Framework Integration (37%), AI Life Cycle Risk Management (21%), and AI Risk Program Management (42%).
AAIR candidates must hold a qualifying designation. Exams are computer-based and taken at PSI testing centers or through remote proctoring. Remote proctoring is not available to residents of India, Mainland China, and Hong Kong. After you register, you have six months to take the exam.
To become certified you must hold a qualifying designation, pass the exam, apply within five years of passing, pay ISACA’s application processing fee, and follow ISACA’s Code of Professional Ethics and CPE policy. Certified holders earn 10 hours of AI CPE each year.
Accumentum is an independent training provider. ISACA sets and changes exam rules, fees, and policies, so confirm current details on isaca.org before you register.
Frequently Asked Questions
How Accumentum’s AAIR course lines up with ISACA’s exam, who is eligible, how the exam is delivered, and what ISACA requires after you pass.
Advanced in AI Risk (AAIR) is an ISACA certification for IT risk professionals who need to evaluate AI vulnerabilities, assess impact, and manage AI risk across its life cycle. ISACA launched it on April 15, 2026.
ISACA requires candidates to hold one of 25 qualifying designations, such as CISA, CISM, CRISC, CGEIT, CDPSE, CISSP, CGRC, CIA, or PMI-RMP. ISACA also says candidates should have proven experience in IT risk or advisory roles.
Three domains: AI Risk Governance and Framework Integration (37%), AI Life Cycle Risk Management (21%), and AI Risk Program Management (42%). The ten Accumentum modules each map to one of these domains.
ISACA states that the AAIR exam has 90 multiple-choice questions, and candidates have 2.5 hours to finish.
The exam is computer-based and taken at a PSI testing center or through remote proctoring. Remote proctoring is not available to residents of India, Mainland China, and Hong Kong. You have six months from registration to take the exam.
They are ISACA’s three advanced AI credentials. AAIA is for auditors, AAISM is for security managers, and AAIR is for risk professionals. Accumentum offers courses for all three.
ISACA requires 10 hours of CPE in artificial intelligence each year, starting the calendar year after you are certified. Those hours may also count toward other ISACA certifications you hold.
CRISC holders, risk managers, and audit, security, and GRC professionals who hold a qualifying certification and are responsible for AI risk in their organization.
The course is delivered as live virtual instructor-led training with scenarios, case discussions, and study materials mapped to the three AAIR domains.
No. You earn AAIR by passing the ISACA exam and meeting ISACA’s certification requirements. Accumentum is an independent training provider, and ISACA sets the exam rules, fees, and policies.
Enrollment
Enroll in the ISACA AAIR Certification Training Course with Accumentum.
Enroll in the Advanced in AI Risk™ (AAIR™) Certification Training Course with Accumentum to prepare for ISACA’s AI risk exam.
You will work through all three AAIR domains with an instructor and practice the governance, assessment, and treatment decisions risk professionals make when AI enters the business.
Before you enroll, confirm that you hold a qualifying designation such as CRISC, since ISACA requires one to sit the exam. For course dates and enrollment help, visit Accumentum’s registration page.
Lead AI risk decisions with AAIR training.
Prepare for the ISACA AAIR exam while you build the skills to bring AI into your enterprise risk program.