- What Is PSI and Why AAISM Uses It
- Finding an Authorized PSI Testing Center
- Remote Proctoring: Who Qualifies and Who Doesn't
- Country-Specific Restrictions: India, China, and Hong Kong
- What to Bring: Check-In Requirements and ID Rules
- Registration, Fees, and Scheduling Your Seat
- What the Exam Environment Looks Like
- What You're Actually Being Tested On at the Testing Center
- Strategic Scheduling: Matching Your Study Plan to the Exam Window
- Frequently Asked Questions
- AAISM uses PSI as its exclusive testing provider, with authorized centers globally and remote proctoring available in most countries.
- Candidates in India, Mainland China, and Hong Kong must test at a physical PSI center - remote proctoring is not permitted in those regions.
- The exam fee is $459 for ISACA members and $599 for non-members; a $50 processing fee applies after you pass.
- You have a 12-month eligibility window from registration to schedule and sit the exam at any authorized PSI location.
What Is PSI and Why AAISM Uses It
When ISACA launched the Advanced in AI Security Management certification on August 19, 2025, it partnered with PSI Services as its designated testing delivery provider. PSI operates one of the largest global networks of authorized testing centers and is the same infrastructure ISACA relies on for other high-stakes credentialing programs. This means candidates pursuing the AAISM have access to a well-established, secure examination environment whether they sit in a physical facility or use PSI's online proctoring platform from home or office.
PSI testing centers are purpose-built for high-stakes certification exams. Workstations are isolated, surveillance is continuous, and exam software is locked down to prevent any outside access during the session. For a credential governed by ISACA - an organization that places significant weight on professional ethics and integrity - this infrastructure matters. The AAISM is not a lightweight certificate; it requires holding an active CISM or CISSP as a prerequisite, and the testing environment reflects the seriousness of the credential.
Finding an Authorized PSI Testing Center
PSI's testing center network spans dozens of countries across North America, Europe, the Asia-Pacific region, Latin America, the Middle East, and Africa. To locate a center near you, you'll use the PSI candidate portal after completing your AAISM registration through ISACA's official exam registration system. The scheduling interface lets you search by postal code or city, view available dates and time slots, and confirm your appointment directly.
Center availability varies by region. In major metropolitan areas - cities like London, Toronto, Sydney, Singapore, Dubai, and across the United States - seats are typically plentiful and can be scheduled within days. In smaller cities or less populated regions, lead times can extend to several weeks. Given the 12-month eligibility window from your registration date, this is manageable, but it does mean you should not wait until the last month of your window to schedule. Centers have filled up around peak certification seasons historically, particularly in Q4.
Once you identify a center and date, treat the appointment as firm. PSI rescheduling policies apply, and last-minute changes typically incur fees or may require a new scheduling request depending on how close to exam day you make changes.
Remote Proctoring: Who Qualifies and Who Doesn't
For most AAISM candidates worldwide, remote proctoring through PSI is a legitimate and fully supported delivery option. This allows you to sit the exam from a private room at home or in an office setting, monitored in real time by a PSI proctor via webcam and screen sharing software. The exam experience - 90 multiple-choice questions, 150 minutes, same scaled scoring from 200 to 800 with a passing score of 450 - is identical whether you test remotely or in person.
To qualify for remote proctoring, candidates must meet PSI's technical and environmental requirements. These typically include a stable internet connection, a functioning webcam and microphone, a private room where no other individuals are present, a cleared desk, and a supported operating system. PSI publishes a technical readiness check tool that candidates should run well before their scheduled exam date to confirm compatibility.
Key Takeaway
Run PSI's technical compatibility check at least one week before your remote exam date, not the night before. If your system fails the check, you need time to resolve issues or switch to a physical testing center appointment.
The AAISM exam is available in both English and Spanish, and this language selection applies equally to remote and in-person delivery. Choose your preferred language during registration - changing it after the fact may require contacting ISACA support directly.
Country-Specific Restrictions: India, China, and Hong Kong
One of the most important logistics details any AAISM candidate needs to know upfront is the geographic restriction on remote proctoring. Candidates residing in or testing from India, Mainland China, and Hong Kong are required to sit the AAISM exam at a physical PSI testing center. Remote proctoring is not available in these regions for this certification.
This is not an unusual restriction - several ISACA and other high-stakes certification programs enforce in-person testing requirements in specific jurisdictions due to regional regulatory and compliance considerations. However, it has real scheduling implications. Candidates in these regions must identify the nearest PSI-authorized center, confirm seat availability, and plan travel if necessary. In India, PSI centers are located in major cities including Mumbai, Delhi, Bengaluru, Chennai, Hyderabad, and Pune, among others. In Mainland China and Hong Kong, candidates should verify current center locations and availability through the PSI portal at the time of registration, as capacity at specific sites can change.
Candidates who are traveling internationally during their eligibility window can test at any authorized PSI center worldwide, regardless of their country of registration. If you're in India but traveling to the UK or US during your eligibility window, you can test at a center in those countries if a remote appointment is unavailable or inconvenient. Your AAISM eligibility is tied to your registration, not your geography at test time - with the exception that you cannot use remote proctoring from a restricted region even while visiting temporarily.
What to Bring: Check-In Requirements and ID Rules
PSI centers follow strict identity verification protocols. For the AAISM exam, you will need to present two forms of identification at check-in. Your primary ID must be a government-issued photo ID - a passport, national identity card, or driver's license is standard. The name on your ID must match exactly the name you registered with through ISACA. Discrepancies, even minor ones like a middle name versus middle initial, can cause check-in problems and potentially prevent you from sitting the exam.
You will not be permitted to bring personal items into the testing room. This includes phones, smartwatches, notes, books, or any electronic devices. PSI centers provide lockers or secure storage for your belongings. In most cases, you'll be given a whiteboard or scratch paper by the proctor - you cannot bring your own. These rules apply to remote proctoring as well, where the proctor will ask you to show your workspace via webcam before the exam begins.
Arrive at a physical center at least 15 to 30 minutes before your scheduled start time. PSI centers process multiple candidates and late arrivals may not be accommodated, resulting in a missed appointment that counts against your eligibility unless rescheduled in advance.
Registration, Fees, and Scheduling Your Seat
The AAISM registration process begins at ISACA's official website. Before you can register, ISACA verifies that you hold an active CISM or CISSP - this is a hard prerequisite and must remain active throughout the AAISM certification lifecycle. Once your prerequisite status is confirmed, you pay the exam fee.
| Fee Type | Amount | When It Applies |
|---|---|---|
| Exam Fee (ISACA Member) | $459 | At registration |
| Exam Fee (Non-Member) | $599 | At registration |
| Application Processing Fee | $50 (one-time) | After passing, upon certification application |
| Annual Maintenance (Member) | $20/year | Each year of the 3-year certification cycle |
| Annual Maintenance (Non-Member) | $35/year | Each year of the 3-year certification cycle |
After payment, ISACA issues your exam authorization, and you then schedule your PSI appointment directly through the PSI candidate portal. The 12-month eligibility window starts from your registration date, not your scheduled appointment date. This means if you register in January and schedule for October, you have used ten of your twelve months before even sitting down. Most candidates benefit from scheduling the exam within the first few months of registration and using the remaining time to prepare, rather than delaying the scheduling decision indefinitely.
For candidates preparing their study strategy alongside their scheduling decisions, our AAISM Exam Time Limit: 90 Questions in 150 Minutes article breaks down exactly how to allocate your 150 minutes across different question types and difficulty levels - a useful read before you finalize your test date.
What the Exam Environment Looks Like
Whether you test at a PSI center or remotely, the exam interface is delivered through PSI's secure browser. The 90 questions are scenario-based and multiple-choice, designed to reflect real-world AI security management situations rather than pure recall. ISACA characterizes these as scenario-based questions - meaning each question typically presents a business context, a problem or decision point, and asks you to select the most appropriate course of action based on AAISM principles.
Questions are not arranged by domain in any visible way during the exam. You'll move through a single pool of 90 questions spanning all three domains. You can flag questions for review and return to them before submitting, which is standard PSI exam functionality. The 150-minute clock runs continuously once the exam begins - there are no scheduled breaks, though some PSI centers allow a brief unscheduled restroom break with proctor permission and the clock continuing to run.
At the end of the exam, PSI typically provides a preliminary pass/fail indication on screen. Your official score report from ISACA will arrive within a few business days and will include your scaled score on the 200-800 scale. A score of 450 or higher is required to pass.
What You're Actually Being Tested On at the Testing Center
Understanding the testing center logistics is only half the preparation equation. The other half is knowing exactly what content ISACA will put in front of you when the clock starts. The AAISM exam is structured across three domains, and the weight of each domain directly determines how many of the 90 questions will draw from that area.
Domain 1: AI Governance and Program Management (31%)
Covers the organizational and programmatic frameworks for governing AI systems securely. Candidates must understand how AI security programs are structured, overseen, and aligned with enterprise risk tolerance.
- AI policy development and program oversight structures
- Roles, responsibilities, and accountability frameworks for AI security
- Regulatory and compliance considerations for AI deployments
- Alignment of AI security programs with business objectives
Domain 2: AI Risk Management (31%)
Addresses the identification, assessment, and treatment of risks unique to AI systems, including model risk, data integrity risk, and third-party AI supply chain risk.
- AI-specific risk identification and assessment methodologies
- Threat modeling for machine learning pipelines and inference systems
- Third-party and vendor AI risk evaluation
- Risk treatment decisions and residual risk management in AI contexts
Domain 3: AI Technologies and Controls (38%)
The highest-weighted domain at 38%, this section tests deep technical and operational knowledge of AI architectures, security controls applied to AI systems, testing methodologies, and monitoring frameworks.
- AI and ML architecture components and their security implications
- Security controls for training data, model development, and deployment
- AI system testing including adversarial testing and red-teaming concepts
- Continuous monitoring strategies for AI systems in production
Domain 3's 38% weighting is significant. If you allocate your preparation time proportionally, roughly two out of every five questions you encounter will draw from AI Technologies and Controls. This domain is where candidates with a pure governance background - even those holding a CISM - may find the greatest gaps. The CISM prepares you well for Domains 1 and 2, but Domain 3 requires additional technical immersion in AI-specific architectures and security tooling.
To practice applying these domains under realistic exam conditions, our AAISM practice test platform provides scenario-based questions mapped to all three domains with explanations tied to ISACA's published content outline.
Strategic Scheduling: Matching Your Study Plan to the Exam Window
Given the domain weight distribution, a structured preparation timeline that accounts for PSI scheduling realities is worth building explicitly. The following framework is calibrated to AAISM's specific domain structure and the logistics of the 12-month eligibility window.
Foundation: Domain 1 and Registration Mechanics
- Complete ISACA registration and schedule your PSI appointment (don't delay this step)
- Confirm testing center location or complete PSI remote proctoring tech check
- Study AI Governance and Program Management - leverage your existing CISM governance knowledge as a bridge
Core Risk: Domain 2
- Focus on AI-specific risk scenarios - how they differ from traditional IT risk
- Study adversarial ML threats, data poisoning, and model integrity risks
- Begin cross-referencing with Domain 3 topics where risk connects to control selection
Heavy Lift: Domain 3 (AI Technologies and Controls)
- Dedicate the most time here - 38% of the exam originates from this domain
- Study AI architecture security, model testing methodologies, and production monitoring
- Use spaced repetition for technical terminology and control frameworks specific to AI
Integration and Simulation
- Take full-length timed practice exams simulating the 90-question, 150-minute format
- Review weak areas by domain; prioritize Domain 3 gaps given its weight
- Confirm PSI appointment details, travel logistics, or remote setup one week before exam day
This timeline assumes roughly 8-12 hours of study per week. Candidates with stronger AI technical backgrounds may compress Domain 3 preparation and extend simulation practice. Those coming purely from a governance background should budget additional time for Domain 3's technical depth. Practice tests calibrated to AAISM's domain weighting are particularly useful during Weeks 11 and 12 for identifying exactly where your score stands before the real exam.
For a detailed breakdown of how to manage time within the exam itself - including how many minutes per question the 150-minute format allows - see our article on the AAISM Exam Time Limit: 90 Questions in 150 Minutes.
Frequently Asked Questions
Yes, PSI allows rescheduling, but policies vary based on how far in advance you request the change. Rescheduling close to your appointment date typically incurs a fee or may require a new booking. Always check PSI's current rescheduling policy at the time of your registration and build buffer time into your 12-month eligibility window to avoid last-minute conflicts.
ISACA requires candidates in these regions to test at physical PSI centers due to regional regulatory and compliance requirements specific to those jurisdictions. This restriction applies to the AAISM exam specifically and is not a reflection of internet availability or candidate eligibility - it is a policy requirement. Candidates in these regions should identify their nearest PSI center immediately after registration.
Holding an active CISM or CISSP is a hard prerequisite for the AAISM, and that credential must remain active throughout the AAISM certification lifecycle - including while you're in your eligibility window preparing to test. If your prerequisite credential lapses, contact ISACA directly to understand the impact on your AAISM registration status before your exam appointment.
Yes. The AAISM exam is currently available in both English and Spanish at both physical PSI testing centers and through remote proctoring (where remote is permitted). You select your preferred language during the registration process. Confirm your language selection before finalizing registration, as changing it after the fact may require direct contact with ISACA support.
After receiving a passing score of 450 or higher on the 200-800 scaled scoring system, you must submit a certification application to ISACA and pay the one-time $50 processing fee. Once ISACA processes and approves your application, you are officially certified and may use the AAISM designation. The certification is valid for three years, requiring a minimum of 10 CPE hours per year in AI-specialized topics and 30 total CPE hours over the three-year cycle.