SC225: ISACA™ Advanced in AI Security Management™ (AAISM™) Preparation

Agenda:

• Domain 1: AI Governance and Program Management (31%)
  • Stakeholder Considerations, Industry Frameworks, and Regulatory Requirements
  • AI-related Strategies, Policies, and Procedures
  • AI Asset and Data Life Cycle Management
  • AI Security Program Development and Management
  • Business Continuity and Incident Response

• Domain 2: AI Risk Management (31%)
  • AI Risk Assessment, Thresholds, and Treatment
  • AI-related Strategies, Policies, and Procedures
  • AI Vendor and Supply Chain Management

• Domain 3: AI Technologies and Controls (38%)
  • AI Security Architecture and Design
  • AI Life Cycle (e.g., model selection, training, and validation)
  • Data Management Controls
  • Privacy, Ethical, Trust and Safety Controls
  • Security Controls and Monitoring

Objectives:

• Explain the principles of AI governance and program management
• Apply AI risk management methods, including risk assessment, treatment, and monitoring
• Evaluate AI technologies, data flows, and lifecycle stages for security implications
• Integrate ethical, safety, and privacy considerations into AI deployments
• Prepare effectively for the AAISM certification exam

Target audience:

The course SC225 ISACA™ Advanced in AI Security Management (AAISM) Preparation is intended for:

• Active CISM or CISSP holders

Prerequisites:

• Active CISM or CISSP holders
• Several years of professional experience in IT security management
• Some expertise assessing, implementing and maintaining AI Systems

Other Info:

The paid examination is not included in the course and is conducted on a separate date. It is administered exclusively via PSI, either as an online examination or at an authorized PSI test center. The examination can be purchased through qSkills™.

ISACA™ certification exam – retake policy

The following regulations for retake exams apply to ISACA™ certification exams:

Candidates have a total of four attempts to pass the respective certification exam within a rolling period of twelve months. If the exam is not passed on the first attempt, a maximum of three further attempts are available within twelve months from the date of the first exam attempt.

The following waiting periods apply for retake exams:

• Retake 1 (2nd exam attempt): at the earliest 30 days after the first exam attempt

• Retake 2 (3rd exam attempt): at the earliest 90 days after the second exam attempt

• Retake 3 (4th exam attempt): at the earliest 90 days after the third exam attempt

For each individual exam attempt, the respectively applicable exam fee must be paid in full.

After passing the exam, the same certification exam may not be taken again within the five-year application period.

Holders of a valid ISACA™ certification may not take the corresponding certification exam again during the validity of their certification.

The current exam and retake policies of ISACA™ apply.

Course language: German or English
Course materials: English
Examination language: English

The official ISACA™ course materials are provided in digital format. Please bring either a laptop or a tablet to the training.

Internet access for your device is provided free of charge at our training center.

See what leading security professionals are saying about ISACA™'s Advanced in AI Security Management (AAISM):

“As someone who has operated in vCISO, QSA, and GRC strategy roles, I see firsthand the demand for professionals who can lead cross-functional programs, shape board-level conversations, and drive measurable outcomes. AAISM cultivates exactly those capabilities. We need more leaders who can think beyond tools and controls; leaders who can build trust, instill a security-first culture, and align cybersecurity with organizational mission. That’s why AAISM is not just timely, it’s essential."

(Emanuel Ohlsen, Sr. Security Consultant)