Exams Vouchers: ISACA Advanced in AI Security Management™ (AAISM™) Exam Voucher (AAISM-EXAM)

Be there when AI security decisions are made
With the significant potential of artificial intelligence comes new threats and vulnerabilities.
ISACA Advanced in AI Security Management™ (AAISM™) is the first and only AI-centric security management certification designed to help experienced IT professionals reinforce the enterprise’s security posture and protect against AI-specific threats.

You’ll be able to manage the evolving security risk related to AI, implement policy, and ensure its responsible and effective use across the organization.

ISACA’s new certification is designed to supplement certified security managers with the ability to identify, assess, monitor and mitigate risk associated with enterprise AI solutions. Professionals will deliver assurance in key practice areas, including:

• AI Governance and Program Management
• AI Technologies and Controls
• AI Risk Management

NB: This voucher can only be purchased if Candidate has previously purchased/attended the preparation course (ILT or E-Learning) at Global Knowledge: AAISM "ISACA Advanced in AI Security Management (AAISM)" 

• Exam Languages: English, Spanish, Japanese
• Exam Length 2.5 hours (150 minutes
• 90 multiple-choice questions

Participants should be ablo to perform the following tasks

1. Collaborate on charter, roles, and responsibilities for governance and management of AI to align with business objectives.

2. Establish and maintain AI-specific security policies and procedures to inform the development and implementation of AI standards and guidelines.

3. Ensure the responsible use of AI by utilizing leading practices, ethical principles, regulatory requirements, and industry frameworks.

4. Participate in or oversee the AI risk management life cycle, including impacts on enterprise risk.

5. Identify and assess the AI threat landscape.

6. Monitor for internal and external AI-related factors to identify the need for reassessment of risk.

7. Design and implement testing and vulnerability management of AI solutions.

8. Conduct AI impact assessments and ensure conformity with regulatory requirements.

9. Embed, monitor, and verify AI security requirements when utilizing vendor AI-enabled solutions.

10. Design and implement security architecture specifically for AI.

11. Advise on the integration of AI architecture as part of enterprise architecture.

12. Design, implement, and regularly review AI security controls to treat risk to an acceptable level.

13. Establish and maintain processes to identify, inventory, and classify data and assets related to AI.

14. Identify and treat security risk associated with data used in the AI life cycle.

15. Establish and maintain AI-specific processes to investigate, document, and report on AI security incidents in accordance with regulatory and contractual requirements.

16. Establish and maintain AI incident handling processes, including containment, notification, escalation, eradication, and recovery.

17. Address AI security risk as part of business continuity and disaster recovery planning.

18. Define and monitor security metrics for AI solutions used throughout the organization.

19. Review and implement AI security tools as part of the information security program.

20. Conduct risk-based human oversight of AI inputs/outputs including trust and safety, quality, explainability, and robustness.

21. Develop and maintain AI-specific security awareness training and acceptable use guidelines.

DOMAIN 1 – AI Governance and Program Management 31%

This Domain demonstrates your ability to advise stakeholders on implementing AI security solutions through appropriate and effective policy, data governance, program management and incident response.

• Stakeholder considerations, industry frameworks, and regulatory requirements
• AI-related strategies, policies, and procedures
• AI asset and data life cycle management
• AI security program development and management
• Business continuity and incident response

DOMAIN 2 – AI Risk Management 31%

This Domain confirms your skill at assessing and managing risks, threats, vulnerabilities and supply chain issues related to the enterprise-wide adoption of AI.

• AI Risk assessment, thresholds, and treatment
• AI Threat and Vulnerability management
• AI Vendor and Supply chain management

DOMAIN 3 – AI Technologies and Controls 38%

This Domain focuses on optimizing AI security and highlights your knowledge of security technologies, techniques and controls tailored to AI systems.

• AI security architecture and design
• AI-related strategies, policies, and procedures
• Data management controls
• Privacy, ethical, trust and safety controls
• Security controls and monitoring

Target Audience for this certification :

• Active CISM or CISSP holders
• Proven experience in Security or Advisory roles 
• Some expertise assessing, implementing and maintaining AI Systems