AI800 - Advanced in AI Risk (AAIR)

Course Description

18 Hours | 3 Days | Instructor-Led Certification Bootcamp

Artificial intelligence changes an organization's risk profile throughout the design, acquisition, implementation, operation and retirement of AI solutions. The Advanced in AI Risk™ course prepares experienced risk and advisory professionals to identify, evaluate, treat and communicate AI-related risk while helping the organization capture AI's business value responsibly.

Aligned with the ISACA AAIR exam domains, this instructor-led course covers AI risk governance and framework integration, AI life-cycle risk management, and AI risk program management. Students apply established enterprise and IT risk practices to AI models, data, vendors and operations through case-based discussion, practical activities and focused certification-exam preparation.

Course Outline

• Module 1: AI and the Enterprise Risk Environment
  • AI models, strategies, use cases and solution components
  • AI opportunities, limitations and risk characteristics
  • Stakeholders, ownership and accountability
  • Integration with enterprise and IT risk management
• Module 2: AI Risk Governance and Framework Integration
  • Governance structures, frameworks and organizational alignment
  • Roles, oversight, accountability and risk ownership
  • AI policies, procedures and organizational awareness
  • Regulatory, contractual and legal considerations
  • Trustworthiness, ethics, fairness and societal impacts
• Module 3: AI Life-Cycle Risk Management
  • Design, development, procurement and documentation
  • Data sourcing, model training, testing and validation
  • Implementation, performance, drift and change management
  • Maintenance, monitoring and decommissioning
  • AI data and asset inventory, classification and protection
• Module 4: AI Risk Program Management
  • AI risk scenarios, threats, vulnerabilities and assessments
  • Risk appetite, tolerance and treatment strategies
  • AI control selection, validation and performance
  • Metrics, monitoring, reporting and escalation
  • Vendor and AI supply-chain risk
  • AI incident response, BIA, continuity and disaster recovery
• Module 5: AAIR Exam Preparation
  • Review of the three AAIR exam domains
  • Scenario-based questions and test-taking strategies
  • Knowledge checks and targeted review

Learner Outcomes

Upon successful completion of this course, students will be able to:

• Explain how AI models, data and use cases change enterprise risk exposure.
• Integrate AI risk management into existing governance, ERM and IT risk frameworks.
• Assess risk throughout the AI solution and data life cycles.
• Develop AI risk scenarios and recommend appropriate treatment strategies and controls.
• Manage AI vendor, supply-chain, incident, continuity and recovery risks.
• Define AI risk metrics, communicate findings and prepare for the AAIR exam.

Additional Information

SLU's Course Kit: (included in the course fee):

All included ISACA materials and resources, including the certification exam voucher, are accessible or valid for 6 months.

• ISACA AAIR Official Review Manual (digital edition)
• AAIR Questions, Answers & Explanations (QAE) Database access
• Instructor-led presentation materials and exam-preparation activities
• One AAIR certification exam attempt

About the Test:

• 90-question computer-based certification exam.
• Covers AI Risk Governance and Framework Integration, AI Life Cycle Risk Management, and AI Risk Program Management.
• Administered through ISACA's authorized testing provider at approved testing centers or by remote proctoring where permitted.
• The exam registration is valid for a six-month eligibility period.

Requirements for Certification Exam Testing:

Exam and certification requirements are separate from the prerequisites for attending this course. To earn the certification, candidates must:

• Hold an active qualifying risk, audit, security, governance, privacy, accounting or compliance credential accepted by ISACA. Qualifying credentials currently include CISA, CISM, CRISC, CGEIT, CDPSE, CRMP, CRMP-FED, CRMA, CERP, CRCM, CGRC, CISSP, CIA, PMI-RMP and designated accounting credentials identified by ISACA.
• Register and pay for the AAIR exam through ISACA.
• Schedule and pass the exam within the six-month eligibility period.
• Maintain the qualifying credential while applying for and holding the AAIR certification.
• Submit the AAIR certification application and US$50 application fee within five years of passing the exam.
• Agree to ISACA's Code of Professional Ethics and meet applicable continuing education requirements.

Duration

18 Hours | 3 Days or 6 Nights