Overview
ISACA Advanced in AI Security Management (AAISM) validates security management professionals’ ability to demonstrate their expertise in AI. This credential builds upon existing security best practices to enhance expertise and adapt to the evolving AI-driven landscape, ensuring robust protection and a strategic edge.
As AI transforms business and security architecture, enterprise risk profiles are changing dynamically. Security leaders must do more than react. They must evaluate, adapt and guide organizations through new AI-driven systems and models, ethical considerations and security tools. Professionals today require both the technical context and leadership mindset to manage AI-specific vulnerabilities with confidence.
AAISM goes beyond simply visualizing AI security. It signifies expertise in driving AI governance and program management, assessing and mitigating AI risk, and utilizing AI technologies and controls to enhance security and streamline monitoring. ISACA’s AAISM certification meets this need by building on globally recognized credentials like CISM and CISSP.
Private in-house training
Apart from public, instructor-led classes, we also offer private in-house trainings of this program for organizations. Call us at +852 2116 3328 or email us at [email protected] for more details.
Why Choose KORNERSTONE
- KORNERSTONE is the Only ISACA® Accredited Training Organization in HK
- ALL Official ISACA Material included
- Practical, scenario-based learning – focus on application, not just theory
- Over 85% Passing rate in ISACA program
- Pass Guaranteed (80% over attendance)
- Exclusive Offer on purchasing Exam Voucher
Skills Covered
- Evaluate and secure AI-enabled systems across the enterprise
- Integrate AI into existing security operations and workflows
- Identify and respond to risks tied to AI technologies
- Reinforce governance, compliance and responsible innovation
Prerequisites
- AAISM candidates must hold either a CISM or CISSP certification
- Adherence to the Code of Professional Ethics
Target Audience
This program is designed for cybersecurity leaders, risk managers, and AI governance professionals who oversee the security of AI systems and machine learning models. It is ideal for those seeking advanced knowledge to safeguard AI-driven environments from emerging cyber threats and compliance risks.
Course Curriculum
Domain 1 — AI Governance and Program Management (31%)
This Domain demonstrates your ability to advise stakeholders on implementing AI security solutions through appropriate and effective policy, data governance, program management and incident response.
A–STAKEHOLDER CONSIDERATIONS, INDUSTRY FRAMEWORKS, AND REGULATORY REQUIREMENTS
B–AI-RELATED STRATEGIES, POLICIES, AND PROCEDURES
C–AI ASSET AND DATA LIFE CYCLE MANAGEMENT
D–AI SECURITY PROGRAM DEVELOPMENT AND MANAGEMENT
E–BUSINESS CONTINUITY AND INCIDENT RESPONSE
Domain 2 — AI Risk Management (31%)
This Domain confirms your skill at assessing and managing risks, threats, vulnerabilities and supply chain issues related to the enterprise-wide adoption of AI.
A–AI RISK ASSESSMENT, THRESHOLDS, AND TREATMENT
B–AI THREAT AND VULNERABILITY MANAGEMENT
C–AI VENDOR AND SUPPLY CHAIN MANAGEMENT
Domain 3 — AI Technologies and Controls (38%)
This Domain focuses on optimizing AI security and highlights your knowledge of security technologies, techniques and controls tailored to AI systems.
A–AI SECURITY ARCHITECTURE AND DESIGN
B–AI-RELATED STRATEGIES, POLICIES, AND PROCEDURES
C–DATA MANAGEMENT CONTROLS
D–PRIVACY, ETHICAL, TRUST AND SAFETY CONTROLS
E–SECURITY CONTROLS AND MONITORING
Supporting Tasks
- Collaborate on charter, roles, and responsibilities for governance and management of AI to align with business objectives.
- Establish and maintain AI-specific security policies and procedures to inform the development and implementation of AI standards and guidelines.
- Ensure the responsible use of AI by utilizing leading practices, ethical principles, regulatory requirements, and industry frameworks.
- Participate in or oversee the AI risk management life cycle, including impacts on enterprise risk.
- Identify and assess the AI threat landscape.
- Monitor for internal and external AI-related factors to identify the need for reassessment of risk.
- Design and implement testing and vulnerability management of AI solutions.
- Conduct AI impact assessments and ensure conformity with regulatory requirements.
- Embed, monitor, and verify AI security requirements when utilizing vendor AI-enabled solutions.
- Design and implement security architecture specifically for AI.
- Advise on the integration of AI architecture as part of enterprise architecture.
- Design, implement, and regularly review AI security controls to treat risk to an acceptable level.
- Establish and maintain processes to identify, inventory, and classify data and assets related to AI.
- Identify and treat security risk associated with data used in the AI life cycle.
- Establish and maintain AI-specific processes to investigate, document, and report on AI security incidents in accordance with regulatory and contractual requirements.
- Establish and maintain AI incident handling processes, including containment, notification, escalation, eradication, and recovery.
- Address AI security risk as part of business continuity and disaster recovery planning.
- Define and monitor security metrics for AI solutions used throughout the organization.
- Review and implement AI security tools as part of the information security program.
- Conduct risk-based human oversight of AI inputs/outputs including trust and safety, quality, explainability, and robustness.
- Develop and maintain AI-specific security awareness training and acceptable use guidelines.
- Advise on security risk and controls related to the AI solution development life cycle within an organization.
Dates & Locations
September 21, 2026 - September 22, 2026
Exam & Certification
- AAISM candidates must hold either a CISM or CISSP certification
- Pass the AAISM exam
- Adherence to the Code of Professional Ethics
Trainer for this course
Mr. H Yeung
AAISM , CBAP, CISM & CDPOS Citizen Data Scientist
- Draws on over 20 years of IT management experience, specializing in secure AI solution development, cybersecurity frameworks, and enterprise technology commercialization.
- Acts as a strategic mentor for an emerging AI company, bringing real-world insights into AI governance and risk management from the frontlines of the industry.
- Corporate trainer since 2018, frequently lecturing on AI security, governance, and safe digital transformation for universities, business chambers, and global technology vendors.
