ISACA · issuer facts checked October 2, 2026
ISACA AAIR registration requirements, checked October 2: An active issuer-listed qualifying designation, including CRISC and other named ISACA or global risk/security/audit/accounting designations. AAIR is not CRISC-only; check the complete issuer list and your active status before registering. This is a qualifying-credential restriction, not a newly verified numeric employment-duration requirement. A course does not supply the prerequisite.
Certification application requirements separately require an exam pass within five years of applying, the application process and ethics agreement. Registering, passing and receiving the credential are distinct steps.
Current official AAIR outline describes a 90-question exam. Exact current appointment duration, seat time, languages and passing-score policy have not been verified here; retained historical logistics are not current booking instructions.
| Family | Weight |
|---|---|
| AI Risk Governance and Framework Integration | 37% |
| AI Life Cycle Risk Management | 21% |
| AI Risk Program Management | 42% |
Connect AI risks to governance and risk appetite; assess lifecycle dependencies and changes; maintain a risk program with treatments, monitoring, escalation and accountable acceptance. Coverage is not a readiness score or proof of performed work. Read the detailed issuer outline rather than treating these families as a complete course syllabus.
Registration eligibility runs six months after registration; pay before scheduling. ISACA lists PSI centers and remote proctoring, with center-only testing in India, mainland China and Hong Kong. That does not verify a particular seat, accessibility arrangement or your account eligibility.
Choose when: Confirm relevance before buying.
Useful evidence: The public outline and 5 free issuer quiz questions help identify concepts to investigate.
Confirm first: These are not a complete free course, actual live exam items, hands-on labs or a pass prediction. A member-only community is not public free access.
Read official preparation choicesChoose when: You need a systematic explanation or guided question review.
Useful evidence: ISACA lists an on-demand review course, review manual and Questions, Answers and Explanations subscription. Check the exact AAIR product—not another credential’s bundle.
Confirm first: Tuition, membership cost, taxes, accessibility, access length for your SKU, included feedback and package entitlements are unverified. Question practice is not workplace performance.
Compare issuer products and termsChoose when: You need feedback on an audit, risk or security-management task.
Useful evidence: Use the original fictional work sample below to specify the evidence, judgment and feedback required. ISACA also lists training workshops.
Confirm first: No current class date, seat, exact instructor, provider authorization or tuition is established here. A badge or similar outline does not prove identical courseware.
Try the no-account work samplePublished issuer exam fees, observed October 2, 2026: USD459 member / USD599 nonmember. A separate USD50 certification application fee applies. Neither amount includes verified tax, retakes, tuition, prerequisite costs or every regional checkout charge. Joining as a member has its own cost; a lower exam tier alone does not establish a saving.
Current AAIR maintenance requirements: 10 AI-related CPE annually and 30 over three years; maintain the active qualifying credential. CPE reporting period is not a three-year expiry or universal renewal purchase. Activity eligibility, evidence retention and your account reporting window must be checked with the issuer. Annual fees are separate from initial exam/application costs.
Unresolved issuer fee conflict: AAIR’s own maintenance page lists USD45 member / USD85 nonmember annually, while AAIA/AAISM pages say all Advanced credentials share USD20/35. Confirm the applicable AAIR invoice and any multiple-credential discount; its actual annual fee and total cost remain unknown. Compare AAIR-specific fees with AAIA’s combined-Advanced statement; no combined fee or three-year ownership total is inferred.
Before purchase confirm active qualifying status, final currency/tax, attempt and retake terms, regional proctoring, accommodations, cancellation, exact training SKU, delivered exercises, access and feedback. Unknown cost is not zero; a published product is not an available class.
A fictional retailer wants an AI-assisted returns decision service. Build a risk register connecting unfair outcomes, privacy, supplier dependence and business interruption to owners, evidence, risk appetite, treatment options and escalation. Do not rate a real person or deploy a model.
Changed condition: The vendor changes its model and a business owner lowers the acceptable delay while removing manual review. Reassess residual risk and the acceptance authority; record what evidence is missing before launch.
Review rubric: can another reader locate the decision, accountable owner, evidence needed, uncertainty, alternative, escalation threshold and reversible next step? Ask for one objection and revise the record. This original fictional paper exercise is not performed work, an actual exam question or a pass prediction. Difficulty depends on relevant judgment and experience—not an unsupported universal score or five-year rule.
Connect AI risks to governance and risk appetite; assess lifecycle dependencies and changes; maintain a risk program with treatments, monitoring, escalation and accountable acceptance. These editorial task connections are not guaranteed job titles, occupational equivalence or employer demand. Compare a real job description with the work you can demonstrate.
No credential-specific salary or exact occupation mapping has been verified. Audit and risk-program responsibilities are not automatically AI engineering, data analysis or security-analyst jobs.
No contact details or exact budget are needed to read, compare or draft a private employer brief.
Prepare an AAIR employer brief Ask about AAIR training
A request permits Learnerside to reply; it does not book training or authorize provider sharing. Sharing requires separate consent naming the intended recipient.