AAISM practice examsFinished
ISACA Advanced in AI Security Management
Managing AI security: stakeholders, frameworks and regulation, AI security strategy and policy, AI asset and data life cycle management, the AI security program, continuity and incident response; AI risk assessment and treatment, threats and vulnerabilities, and vendor and supply chain risk; and AI security architecture, the secure model life cycle, data controls, privacy, trust and safety controls, and security controls and monitoring.
What you get
Papers are cut from the bank and weighted like the real exam, and no question appears in two of them. Every wrong answer comes back on later days until you have it right.
What the exam covers
| AI Governance and Program Management | 31% |
| AI Risk Management | 31% |
| AI Technologies and Controls | 38% |
Two sample questions
1. A team trains a model on sensitive health data. What should it consider, according to the OWASP decision tree?
- Only evasion attacks against the model's decision boundary
- Model inversion, membership inference and input data leaks — correct
- Only prompt injection through the chatbot interface
- Only theft of the training hardware from the data center
Why: Sensitive training or input data raises model inversion, membership inference and input data leak threats.
2. What does the OWASP AI Exchange's confidential computing control do?
- Denies access to where sensitive data is processed — correct
- Publishes the model weights for confidential peer review
- Encrypts only the model's front-end code
- Hides the AI system from the asset inventory
Why: Confidential computing denies access to where sensitive data or models are processed.
The real AAISM exam
| Length | 150 minutes (2.5 hours) |
|---|---|
| Questions | 90 |
| Pass mark | 450 on a scale of 200 to 800 |
| Price | $459 (ISACA members) / $599 (non-members) |
| Recommended before you sit it | An active CISM or CISSP certification |
| Valid for | Maintained under the AAISM continuing professional education (CPE) policy |
Exam facts as published by ISACA; always check the vendor’s page before you book.
Study AAISM with Chiron
Chiron is invitation-only while we are in beta, and nothing is for sale yet: invited accounts use every paper, drill and course note for free.