What Is AI Governance, and Why the ISACA AAIA Exam Is Booming
If you audit technology for a living, you have probably noticed the same question landing on your desk twice a month: who is checking the AI? That pressure is why the ISACA Advanced in AI Audit (AAIA) is booming. Boards, regulators and CISOs now want someone who can evaluate model governance the way we already evaluate access controls and change management. AAIA is ISACA's answer, and it sits on top of the audit career you already have rather than replacing it.
Before you invest a single evening of study, know the eligibility rule. AAIA requires an existing CISA, or a CIA, CPA, ACCA or an equivalent designation held in an IT audit or advisory role. This is an advanced credential, not an entry point. Passing any practice paper, including ours, does not make you eligible to sit the real exam. Confirm your qualifying designation with ISACA first, then start preparing.
What AI governance really means here
AI governance is the discipline of making sure an organisation can answer for the AI it deploys: how models are approved, monitored, documented, and retired, and who is accountable when one goes wrong. For an auditor that translates into concrete testable work, which is exactly how ISACA frames the exam. Rather than abstract ethics essays, AAIA asks whether you can operate AI systems responsibly, assess governance and risk, and pick the right audit tools for the job.
How the AAIA exam is built
The AAIA is a linear, multiple-choice exam of 90 questions in 150 minutes. That works out to roughly 100 seconds per question, so pacing matters but you are not being rushed off the page. Scoring uses ISACA's scaled model from 200 to 800, and you need 450 to pass. A scaled score is not a raw percentage, so do not try to reverse-engineer how many questions you can miss; treat every domain as if it counts, because it does.
The three domains are not weighted evenly, and that should shape where your hours go.
| Domain | Weight |
|---|---|
| AI operations | 46% |
| AI governance and risk | 33% |
| AI auditing tools and techniques | 21% |
AI operations is nearly half the paper, so the deployment, monitoring and lifecycle mechanics of live AI systems deserve the most study time. AI governance and risk is the next largest block and plays to the framework instincts most auditors already have. The tools and techniques domain is the smallest, but do not skip it, because it is where abstract knowledge turns into audit evidence.
How do I pass the AAIA?
How do I pass a scaled, domain-weighted exam like this? Study in proportion to the weights, not in proportion to what feels comfortable. Most auditors are strongest on governance and risk and weakest on the operational detail of how models are trained, versioned and monitored, which is the opposite of where the marks concentrate. Read ISACA's content outline domain by domain, then test yourself under timed conditions until the 100-seconds-per-question rhythm feels automatic.
That is where a mock test earns its place. Our ISACA Advanced in AI Audit (AAIA) mock test is a practise exam for AI audit built to mirror the real thing: multiple-choice, which is the format of the actual exam, covering all three domains at ISACA's published weightings across the same 150-minute limit. You get a realistic sense of pacing and of which domain is quietly costing you marks, well before exam day. It is honest practice, not a leaked question bank, so use it to diagnose weak spots rather than to memorise answers.
When you are ready to drill seriously, buy a mock test pack and work through it in full-length, timed sittings. Review every wrong answer against the relevant domain in ISACA's outline, then repeat. If your qualifying designation is in order, an AAIA mock test taken twice under real conditions is one of the cheapest ways to walk in confident.
The short version
AI governance is becoming a core audit skill, and AAIA is the credential formalising it: 90 questions, 150 minutes, a 450 pass mark on the 200 to 800 scale, weighted heavily toward AI operations. Check your eligibility, study by the weights, and grab a practise exam pack to rehearse the real pacing.