- Why Language Choice Matters for the AAISM Exam
- English and Spanish: What ISACA Actually Offers
- Geographic Restrictions and Testing Format by Language
- How Language Intersects with AAISM Domain Complexity
- AI Security Terminology: Navigating Domain Vocabulary in Spanish
- Registration, Fees, and the 12-Month Eligibility Window
- Structuring Your Preparation Around Language and Domain Weight
- Frequently Asked Questions
- The AAISM exam is available in English and Spanish, administered by PSI with remote or in-person proctoring depending on your location.
- Candidates in India, Mainland China, and Hong Kong must sit at a physical PSI center regardless of preferred language.
- Domain 3 (AI Technologies and Controls) carries 38% of the exam weight - the heaviest single domain - requiring deep technical vocabulary in your chosen...
- You have 12 months from registration to sit the exam; selecting your language at registration locks that choice for your 2.5-hour, 90-question session.
Why Language Choice Matters for the AAISM Exam
Most certification guides treat language selection as a minor logistical footnote. For the Advanced in AI Security Management (AAISM) exam, it is anything but. The exam is a 90-question, scenario-based assessment administered over 150 minutes, with every question designed around real-world AI security management situations. When you are working through a complex scenario about AI model governance under time pressure, reading in your strongest language is not a convenience - it is a performance variable.
ISACA, the Schaumburg, Illinois-based association that governs the AAISM certification, launched Version 1 of the exam on August 19, 2025. From day one, two language options were made available: English and Spanish. This guide breaks down exactly what that means operationally, domain by domain, and how to align your preparation strategy to the language you will actually test in.
English and Spanish: What ISACA Actually Offers
ISACA has confirmed that the AAISM exam is offered in both English and Spanish at launch. This reflects ISACA's ongoing commitment to making advanced security certifications accessible across the global Spanish-speaking professional community - a significant population in Latin America, Spain, and the United States.
When you register through ISACA's candidate portal and proceed to schedule with PSI (the authorized testing provider for AAISM), you will select your preferred language as part of the scheduling workflow. This is the point of commitment. Your selected language will be the language of every question, every scenario narrative, and every answer option you see during the exam. There is no mid-exam language switching.
What the Spanish Version Includes
The Spanish-language AAISM exam is a full translation of the English version, meaning all 90 multiple-choice questions and their answer options are rendered in Spanish. The domain structure remains identical - Domain 1: AI Governance and Program Management (31%), Domain 2: AI Risk Management (31%), and Domain 3: AI Technologies and Controls (38%) - but the language of every scenario, prompt, and response option is Spanish. The passing score remains fixed at 450 on a scaled score of 200 to 800, and the time limit of 150 minutes applies equally to both language versions.
Geographic Restrictions and Testing Format by Language
The AAISM exam offers remote proctoring through PSI, which is a significant flexibility for most candidates globally. However, geographic restrictions apply to a specific set of locations. Candidates based in India, Mainland China, and Hong Kong are required to test at a physical, authorized PSI testing center. Remote proctoring is not available in these regions regardless of which language - English or Spanish - the candidate has selected.
For candidates in Latin America, Spain, and the United States who select Spanish, remote proctoring is generally available, provided their location is not otherwise restricted. This means a Spanish-speaking candidate in Mexico City, Bogotá, or Madrid can, in most circumstances, take the AAISM exam from a home or office environment under remote proctoring conditions, in their preferred language.
| Candidate Location | Language Options | Proctoring Format Available |
|---|---|---|
| United States | English, Spanish | Remote or PSI Center |
| Latin America | English, Spanish | Remote or PSI Center |
| Spain | English, Spanish | Remote or PSI Center |
| India | English, Spanish | PSI Center Only |
| Mainland China | English, Spanish | PSI Center Only |
| Hong Kong | English, Spanish | PSI Center Only |
Verify your specific country and region's status directly through PSI's scheduling interface at the time of booking, as testing center availability can change. For a complete breakdown of the registration timeline and how your 12-month window interacts with scheduling, see our dedicated guide on the AAISM Eligibility Window: Registration to Exam Deadline.
How Language Intersects with AAISM Domain Complexity
The AAISM exam is structured across three domains, and each presents a different type of language challenge. Understanding this intersection helps you allocate your preparation time more intelligently, whether you are testing in English or Spanish.
Domain 1: AI Governance and Program Management (31%)
This domain covers the structures, policies, and strategic frameworks organizations use to govern AI programs. In both English and Spanish, the vocabulary here is heavily policy-oriented - terms around accountability frameworks, board-level oversight, regulatory alignment, and AI ethics programs. Spanish-language candidates will encounter governance terminology that has established translations in the field (e.g., gobernanza, gestión del programa), but precision matters in scenario interpretation.
- AI program charters and ownership structures
- Regulatory alignment for AI systems across jurisdictions
- AI ethics policies and stakeholder accountability mechanisms
- Integration of AI governance within broader enterprise security programs
Domain 2: AI Risk Management (31%)
Risk management vocabulary in AI security is evolving rapidly, and Spanish translations for newer concepts - adversarial risk, model drift, data poisoning - may not always map cleanly to familiar risk management terms. Candidates testing in Spanish must be especially deliberate in building their AI-specific risk vocabulary before exam day.
- AI-specific threat modeling and risk identification
- Bias risk, explainability risk, and third-party AI supply chain risk
- Risk appetite and tolerance frameworks applied to AI deployments
- Incident response and recovery procedures tailored to AI systems
Domain 3: AI Technologies and Controls (38%)
This is the highest-weighted domain and also the most technically dense. It covers AI architecture, security controls, testing methodologies, and monitoring. In both languages, candidates must understand concepts like model interpretability controls, adversarial testing, and MLOps security. The technical terminology in Spanish (e.g., controles de seguridad, arquitectura de IA, monitoreo de modelos) requires specific study - not just general Spanish fluency.
- Secure AI architecture design principles
- Security controls across the AI model lifecycle
- AI system testing: adversarial, red teaming, and integrity validation
- Continuous monitoring and detection for deployed AI models
AI Security Terminology: Navigating Domain Vocabulary in Spanish
If you are planning to sit the AAISM exam in Spanish, one of the most productive investments of your preparation time is building a working glossary of AI security terms as they appear in Spanish-language ISACA documentation and professional literature. ISACA has produced Spanish-language resources for its established certifications (CISM, CISA, CRISC), and these provide a strong baseline for the translated terminology style you can expect in AAISM.
A few categories of terminology deserve particular attention:
- Governance terms are generally well-established in Spanish-language security literature and should present fewer comprehension surprises.
- Risk management terms require attention around newer AI-specific concepts. Terms like "model drift" or "hallucination risk" do not have universally standardized Spanish translations, and the exam's official translation will use a specific rendition. Familiarizing yourself with ISACA's own translated materials is the safest preparation path.
- Technical AI and controls vocabulary in Domain 3 is the highest-stakes area. Many technical terms are borrowed directly from English even in Spanish-language technical documentation (machine learning, deep learning, pipeline), but framing sentences and scenario context will be fully in Spanish, requiring fluid bilingual comprehension.
Key Takeaway
If Spanish is your chosen exam language, do not rely solely on English-language study materials. Supplement with ISACA's official Spanish-translated publications and, where possible, practice reading AI security scenarios in Spanish to build comprehension speed under simulated exam conditions. Visit our AAISM practice test platform to see how practice questions are structured.
Registration, Fees, and the 12-Month Eligibility Window
Before language selection ever becomes relevant, you must meet - and document - the AAISM prerequisite requirements. You must hold an active CISM or CISSP credential at the time of application. This is not a soft recommendation; it is a hard gate. If your CISM or CISSP lapses at any point after you earn AAISM, your AAISM certification is also at risk, since the maintenance of those base credentials is an ongoing requirement throughout the entire AAISM certification lifecycle.
Once your eligibility is confirmed, the fee structure is as follows:
- ISACA members: $459 exam fee
- Non-members: $599 exam fee
- One-time application processing fee (post-pass): $50
- Annual maintenance: $20 per year for ISACA members, $35 per year for non-members
After registering, you have a 12-month eligibility window to schedule and sit your exam. Language selection occurs during the PSI scheduling step, not during the initial ISACA registration. This matters because it means you have time to assess your language readiness before committing. However, once you complete your PSI scheduling with a language selected, that selection is tied to your appointment. For a full walkthrough of how to manage your registration timeline strategically, the article on the AAISM Eligibility Window: Registration to Exam Deadline covers every key date and decision point.
After you pass, the AAISM certification is valid for three years. Renewal requires a minimum of 10 CPE hours per year in AI-specialized topics and 30 CPE hours total across the three-year cycle, in addition to adherence to ISACA's Code of Professional Ethics. Your CPE documentation and reporting can be completed in either language through ISACA's member portal.
Structuring Your Preparation Around Language and Domain Weight
Given the domain weight distribution - Domain 3 at 38%, and Domains 1 and 2 each at 31% - a rational preparation schedule front-loads technical controls content while ensuring governance and risk management vocabulary gaps are addressed early. For Spanish-language candidates, this structure also needs to incorporate active terminology building as a parallel track throughout preparation.
Domain 1 Foundation + Governance Vocabulary
- Map ISACA's AI governance frameworks in your exam language
- Review AI program management structures and ownership models
- Spanish-language candidates: build a Domain 1 terminology list from ISACA translated resources
Domain 2 AI Risk Management + Scenario Practice
- Focus on AI-specific risk identification methods and threat modeling
- Practice reading risk management scenarios in your target language under timed conditions
- Identify any AI risk vocabulary gaps (model drift, data poisoning, bias risk) in Spanish
Domain 3 Deep Dive - AI Technologies and Controls (38%)
- Systematic study of AI architecture security and controls across model lifecycle
- Adversarial testing concepts, red teaming methodology, and integrity validation
- Continuous monitoring frameworks for deployed AI systems
- Intensive scenario-based practice questions: use AAISM practice tests to simulate the 90-question format
Full Exam Simulation + Language Review
- Complete timed, full-length practice exams in your chosen language
- Review weak domain areas and any remaining terminology gaps
- Confirm PSI appointment details, proctoring setup, and identification requirements
This framework uses deliberate spaced review - moving from governance to risk to controls - because each domain builds conceptual context for the next. The 38% weight of Domain 3 justifies the three-week block, and the final week of simulation practice is especially important for Spanish-language candidates who need to confirm that their reading fluency in scenario-based AI security contexts is exam-ready.
Regardless of which language you test in, the value proposition of AAISM is the same: it demonstrates that you can manage AI security not just as a technical practitioner, but as a program leader who understands governance structures, risk frameworks, and technical controls in the context of real-world AI deployments. Explore our full suite of AAISM practice questions to benchmark your domain readiness before exam day.
Frequently Asked Questions
Language is selected during PSI scheduling and is tied to your specific appointment. If you need to change your language, you would need to reschedule your appointment through PSI, subject to their rescheduling policies and any applicable fees. Confirm current rescheduling terms directly with PSI when you book.
No. The passing score is 450 on a scaled score of 200 to 800 for both the English and Spanish versions. ISACA's psychometric scaling process normalizes for question difficulty, not for language of administration.
ISACA does not require CPE activities to be conducted in any specific language. Your 10 CPE hours per year in AI-specialized topics can come from activities in English, Spanish, or other languages, provided they meet ISACA's CPE eligibility criteria and are documented accurately in your member portal.
The scenario structure and question format are identical across both languages - 90 multiple-choice questions over 150 minutes, covering real-world AI security management situations across three domains. The Spanish version is a professional translation of the English version; the logical structure and answer format are the same. The challenge for Spanish-language candidates is ensuring sufficient fluency with AI-specific technical vocabulary as used in ISACA's translated materials.
No. Candidates based in India, Mainland China, and Hong Kong must sit the AAISM exam at an authorized physical PSI testing center. This requirement applies regardless of the language selected - English or Spanish. Remote proctoring is not available in those regions under current ISACA and PSI policy.
Ready to Start Practicing?
Whether you're preparing in English or Spanish, our AAISM practice tests are built around the actual domain structure - AI Governance (31%), AI Risk Management (31%), and AI Technologies and Controls (38%) - so every question you practice reflects the real exam format. Start benchmarking your readiness today.
Start Free Practice Test