Udemy
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
AAISM Certification Exam Prep: AI Security Management
New

AAISM Certification Exam Prep: AI Security Management

Exam-focused preparation for ISACA's AAISM covering AI governance, risk, and technology controls across all 3 domains
Created byAseem Mankotia
Last updated 10/2026
English

What you'll learn

  • Map NIST AI RMF, ISO/IEC 42001, MITRE ATLAS, and the EU AI Act into a single AI security program as governance inputs
  • Build and classify an AI asset and data inventory across the model lifecycle
  • Design AI-specific incident response and business continuity playbooks
  • Assess AI risk appetite, thresholds, and treatment strategies for generative and agentic AI use cases
  • Map AI-specific threats — prompt injection, poisoning, evasion, model theft, jailbreaks — to MITRE ATLAS and OWASP LLM Top 10

Course content

11 sections • 10 lectures • 2h 59m total length
  • AI Governance Foundations: Frameworks as Program Inputs18:15

Requirements

  • Active CISM (Certified Information Security Manager) or CISSP certification, per ISACA's AAISM eligibility requirements
  • Working fluency in enterprise security governance, risk management, and control frameworks

Description

This course contains the use of artificial intelligence.

This course delivers exam-focused preparation for ISACA's Advanced in AI Security Management (AAISM) credential, the first advanced certification focused specifically on securing AI systems — distinct from ISACA's AI risk-focused AAIR. Instructor Aseem Mankotia maps every chapter directly to ISACA's official three-domain exam content outline (AI Governance and Program Management 31%, AI Risk Management 31%, AI Technologies and Controls 38%), translating AI-specific governance, risk, and architecture concepts into the program, risk-register, and control-taxonomy language that experienced security managers already use. This is an ADVANCED credential: it assumes you hold an active CISM or CISSP plus AI-security-management experience, and it assumes fluency in enterprise security management — not machine-learning engineering — so the course is built for CISOs, security managers, security architects, risk and governance leads, and senior security engineers extending existing programs into AI.

Each chapter follows a decision-focused, read-and-understand format: NIST AI RMF, ISO/IEC 42001, MITRE ATLAS, the OWASP Top 10 for LLM Applications, and the EU AI Act are covered as inputs to a security program rather than taught from scratch, alongside AI-specific threats — prompt injection, data poisoning, adversarial evasion, model theft and extraction, jailbreaks, insecure agentic tool use, and foundation-model supply-chain risk — mapped to MITRE ATLAS and framed strictly as defensive material for authorized AI security management. Practitioner-style exercises include mapping threats to ATLAS and controls, designing a guardrail and monitoring plan for an LLM deployment, drafting an AI incident-response playbook, evaluating a foundation-model vendor's security and data-usage terms, and defining board-level AI security metrics, with Domain 3 (AI Technologies and Controls) given the most chapter time to match its 38% exam weight.

The exam is 90 questions in 180 minutes, scored on an 800-point scale with a minimum score of 450 required, at an approximate fee of USD 599 non-member / USD 459 member — confirm current pricing, prerequisites, and the official exam content outline on ISACA's AAISM page before scheduling. The final chapter is a full 90-question exam simulation walkthrough with scenario-question strategy and a 3-hour time-management plan. Prerequisites (an active CISM or CISSP plus AI-security-management experience) are stated upfront so there are no surprises at registration — this course is exam-focused preparation for candidates who already meet ISACA's eligibility requirements.

AI content disclosure: This course was produced with the assistance of artificial intelligence tools. Lecture narration is AI-voice generated, and lecture scripts, slides, and practice questions were drafted with AI assistance, then reviewed and curated by the instructor for technical accuracy and alignment with the official AAISM exam guide.

Who this course is for:

  • Experienced security managers and leaders — CISOs, security managers, security architects, and risk/governance leads — who now own the security of AI systems
  • Holders of CISM or CISSP already governing security programs who must now extend governance, risk, and controls to AI