Plan on about 60 hours spread over seven weeks. That figure is for the candidate the AAISM was written for: an active CISM or CISSP holder, working in security management, who has sat in a few conversations about models in production but has never studied AI security formally. Seven weeks at eight or nine hours each is enough, because the exam is short at 90 multiple-choice questions in 150 minutes, and because a large slice of its content is already in your head.
Now the conditional, because the number on its own is misleading. If your AI exposure is genuinely nil, if you have never read a model card or sat through a deployment review, add two or three weeks and budget nearer 85 hours. If AI security is already the work you do and the exam is only certifying it, five weeks will cover you. What does not change across any of those versions is the shape of the schedule. Very little time goes to governance fundamentals. Most of it goes to Domain 3.
Audit what transfers before you open a syllabus
AAISM is unusual among the exams we write about, because ISACA has already told you what everybody in the room knows. The prerequisite is an active CISM or CISSP, and only those two credentials qualify. There is no experience route and no waiver, so there is a floor under every candidate, and the exam is written on the assumption that the floor is there. The full eligibility picture is in AAISM requirements and eligibility.
That changes the first task. Most study plans open with a week of foundations. Here, a week of foundations is a week spent being taught your own job. Before you schedule anything, sort the exam content outline into three piles: material you can skim to confirm ISACA's wording, material where you know the concept and need to relearn the object it points at, and material you do not know at all. Those piles deserve wildly different hourly rates, and the plan below is that sort turned into dates.
Which parts of Domain 1 can you move through quickly?
Domain 1, AI Governance and Program Management, is 31 percent of the paper and the domain where the most transfers.
Skim these. Stakeholder mapping, the program mandate and operating model, RACI across security and data science and the business, program metrics and reporting, the structure of a policy set, the anatomy of an incident response playbook, and recovery objectives for business continuity. You have built all of it. Read ISACA's phrasing so your vocabulary matches, then move on. One sitting covers the lot.
Translate these. Your framework shelf gains two items. ISO/IEC 42001 is a certifiable AI management system standard that pairs with the ISO/IEC 27001 you already run. NIST AI RMF is voluntary and outcome-based, organized around its govern, map, measure and manage functions. The exam will hand you a scenario and expect you to know which of the two it is asking about. That is an evening of work, not a week.
Learn these cold. AI asset and data life cycle management is the part of Domain 1 that is genuinely new, and candidates underrate it because the heading sounds so familiar. An AI asset inventory has to carry models, training datasets, pipelines, prompts, embeddings and inference endpoints. Leave any of those out and classification, recovery scoping and incident scope all break further down the chain. The life cycle half runs collection, training, deployment, monitoring, retraining and retirement, with shadow AI as a control problem at every stage. Next to it sits the other new piece: AI regulatory expectations are tiered by what a system is used for rather than by what data it holds, which is not how privacy law trained you to think. Budget one week for the whole domain, not three.
What Domain 2 asks that your risk register does not
Domain 2 is also 31 percent, and it carries two official names. ISACA's web outline calls it AI Risk Management. ISACA's own AAISM Candidate Guide calls it AI Risk and Opportunity Management. Same weight, same three sub-areas, two titles in two of its own documents. Learn the sub-areas and ignore the argument.
The method transfers almost entirely. Identify, analyze, evaluate, set thresholds, choose a treatment, escalate when a threshold is crossed: none of that is new to a CISM holder. Three things underneath it are. First, why AI risk behaves differently, which comes down to non-determinism, drift, dependence on data you may not own, and opacity. Second, the two reference catalogs, which the exam likes to test as a pair: the OWASP Top 10 for LLM Applications is a catalog of weaknesses, MITRE ATLAS is a catalog of adversary behavior. Third, provenance work that now runs to model and data bills of material rather than software ones. Another single week, spent on the deltas rather than on the method.
Why Domain 3 should take more than 38 percent of your hours
Here is the opinion this post exists to deliver. Domain 3, AI Technologies and Controls, is 38 percent of the questions, and it should get roughly 55 to 60 percent of your study hours. Those two numbers are allowed to disagree, because a blueprint weight measures how many questions an area gets, not how expensive that area is to learn. Everywhere else on this exam you are refreshing. Here you are starting from nothing.
Five sub-areas sit inside it: AI security architecture and design, the AI life cycle covering model selection and training and validation, data management controls, privacy and ethical and trust and safety controls, and security controls and monitoring. AAISM domains explained walks all three domains sub-area by sub-area, and how hard the AAISM exam is makes the case for why this is the section that decides the result. What matters for a schedule is that Domain 3 splits into two kinds of study that need different treatment.
Some of it needs reading and comparing. Model selection trade-offs across build versus buy, open weights versus closed, and hosted API versus self-hosted are best learned by building your own comparison table and defending each row out loud. Deployment patterns, trust boundaries and zero trust for non-human identities work the same way. The rest needs drilling until recall is automatic, because 100 seconds a question leaves no room to reconstruct a definition mid-item. That pile includes the difference between validating a model for accuracy and validating its integrity, the adversarial techniques and their runtime signatures, and the privacy-preserving techniques and what each one actually costs you. Our ISACA AAISM Simply Certified Study Guide is proportioned to the same split, with three of its seven teaching chapters on Domain 3 alone.
The seven-week AAISM study plan
Eight or nine hours a week, front-loaded onto the material you do not already own.
| Week | Focus | Hours | What the week should leave you with |
|---|---|---|---|
| 1 | Transfer audit plus the Domain 1 deltas | 8 | Your three-pile sort, the AI asset and data life cycle cold, the framework shelf straight |
| 2 | Domain 3: architecture, trust boundaries, zero trust for AI | 9 | Deployment patterns compared, and a clear view of where an AI system's trust boundaries fall |
| 3 | Domain 3: model selection, secure training, MLOps integrity | 9 | Your own selection comparison table, and the two meanings of validation separated |
| 4 | Domain 3: data controls, privacy techniques, content safety | 9 | Privacy trade-offs recallable without notes, and guardrails placed as security controls |
| 5 | Domain 2 deltas: AI risk behavior, OWASP and ATLAS, supply chain | 8 | The two catalogs told apart on sight, and provenance extended to models and data |
| 6 | Domain 3: monitoring, adversarial detection, runtime protection, plus a full 90-question timed run | 9 | AI telemetry mapped to SOC action, and a scored baseline with an error log |
| 7 | Second timed run, error-log rework, Domain 3 weak spots | 8 | A second score, and the gaps from run one closed rather than reread |
Add it up and Domain 3 owns four of the seven weeks and 36 of the 60 hours, which is 60 percent of your time buying 38 percent of the questions. That is the plan doing what the previous section argued for. Practice questions start in week two, not week six: ten to fifteen at the end of every study session, on that session's material, reading the explanation for the options you rejected as well as the one you chose. The AAISM practice questions walkthrough shows the kind of reasoning the credited answers reward.
The trap: week one is going to feel too easy
Say it plainly, because it is the failure mode this exam produces. A CISM holder who starts at Domain 1 and works through the outline in order will cover the first 31 percent quickly, score well on the early questions, feel ahead of schedule, and take that feeling as evidence of readiness. It is evidence of nothing except that Domain 1 was always going to be fast. Then Domain 3 arrives with six weeks of unfamiliar material and two weeks of calendar left.
The fix is structural rather than a matter of willpower. Do not study in outline order. Get the Domain 1 deltas done in week one and then leave the domain alone, and never let a strong early practice score buy Domain 3 a smaller allocation. If you want one honest check at the halfway mark, ignore your overall percentage and look only at how you are doing on adversarial machine learning and data management controls. That is the number that predicts the result.
Studying an exam that is barely a year old
AAISM launched on 19 August 2025, and that fact belongs inside your plan rather than in a footnote. Mature certifications have years of circulating question banks, forum write-ups and accumulated knowledge about which traps recur. AAISM has very little of that, and what does exist has not been sat against often enough for anyone to know how representative it is.
Two things follow. Give primary sources more of your reading time than you would on an older exam: the exam content outline itself, the NIST AI RMF functions, the structure of ISO/IEC 42001 against ISO/IEC 27001, the OWASP Top 10 for LLM Applications, and MITRE ATLAS. Those are the documents the questions were written from, and on a young exam they sit closer to the source than any third-party summary. Second, plan for a small question pool and work it harder. With fewer items available, each one has to teach you more, which means reviewing every option in every question instead of checking whether you got it right and moving on. Do not build a schedule that assumes two thousand practice questions are waiting for you, because they are not.
When should you register?
Registration opens a six-month eligibility window, and the sitting has to happen inside it. One six-month extension is available for US$75 if you need it. Against a seven-week plan that window is generous, which is rather the point: registering is what converts a plan into a date, and most candidates who drift are candidates who never booked.
The sensible move is to register once you have a start date you believe in, then book the seat for the end of week seven as soon as the slot exists. The extension is a fallback, not a strategy, since it costs money and the exam fee itself is nonrefundable and nontransferable. Current fees and the retake rules are in AAISM exam cost and fees, and the credential end to end is covered in what the AAISM certification is. Confirm the window, the fees and the outline on ISACA's own AAISM page before you pay for anything.
FAQ
How long does it take to study for the AAISM exam?
About 60 hours over seven weeks for an active CISM or CISSP holder with some working exposure to AI systems. With no AI exposure at all, plan on nine or ten weeks and closer to 85 hours. If AI security is already your day job, five weeks is realistic. The variable is Domain 3, not the other two.
Should I study the AAISM domains in order?
No. Studying in outline order puts your first weeks on the material that transfers most cleanly from a CISM or CISSP, which feels productive and leaves the hardest 38 percent until the end. Clear the genuinely new parts of Domain 1 in a single week, then move to Domain 3 and give it the largest block of hours.
How many hours should each AAISM domain get?
Roughly one week each for Domains 1 and 2, and four weeks for Domain 3. The published weights are 31, 31 and 38, but your hours should not copy them, because a weight describes question share rather than how long the material takes to learn. Domain 3 is the one your existing credential did least to prepare you for.
When should I start AAISM practice questions?
From the second week, on the material you studied that session, ten to fifteen at a time. Save full-length 90-question timed runs for weeks six and seven, when you have enough coverage for a score to mean something. Two timed runs are enough if you rework every error rather than rereading the chapter around it.
Can I study for the AAISM in four weeks?
It is possible if AI security is already your working role and you are mostly learning ISACA's vocabulary and framing. It is a poor plan for anyone else, because Domain 3 on its own needs about four weeks of unfamiliar technical material, and compressing it tends to produce recognition rather than the recall that 100 seconds a question demands.
Building a schedule for AI security leadership? ISACA AAISM: Simply Certified Study Guide teaches all three domains at the published 31/31/38 weighting, with three full chapters on Domain 3 and two full-length practice exams where every answer is explained.
Simply Certified is an independent publisher. AAISM, CISM and ISACA are trademarks of ISACA. Our books are independent study material and are not affiliated with, endorsed by, or sponsored by ISACA.