AAIR
ISACA Advanced in AI Risk · ISACA
The AAIR is ISACA’s newest AI certification: it proves that an experienced risk professional can identify, assess and handle the risks specific to artificial intelligence across its lifecycle. It completes the AAIA (audit) and AAISM (security) trio. Its strength is to anticipate the risk management obligations brought by the EU AI Act; its limit is its very recent launch, so recognition by employers is still to come.
- Exam
- 90 multiple-choice questions in 2 h 30, scaled score from 200 to 800 with a pass mark of 450. Launched on 15 April 2026.
- Exam price
- $459ISACA member price; non-members pay US$599.
- Required experience
- Hold one of 27 accepted designations (CRISC, CISA, CISM, CGEIT, CDPSE, CISSP, CGRC, CIA, PMI-RMP, CPA and others) and have proven experience in IT risk or advisory roles.
- Validity and maintenance
- 10 CPE hours per year and 30 over 3 years, with the prerequisite certification kept active. ISACA’s pages give two different annual fees: US$20/35 or US$45/85 (members/non-members).
- Format
- Multiple choice
Who is it for?
Experienced risk professionals (CRISC holders and equivalent) in charge of AI risks: risk managers, compliance officers, GRC consultants.
Domains covered
- AI risk governance and framework integration: 37%
- AI lifecycle risk management: 21%
- AI risk programme management: 42%
Belinda’s take
Information checked on 2 October 2026 against the official site. Prices exclude tax and training, and may change.
Some figures come from secondary sources: check them on the official site before you register.
The certification names mentioned are trademarks of their respective owners. KrakenShield is not affiliated with any certification body and does not reproduce any exam question.
