AAIR Review Manual

About ISACA

ISACA^® (www.isaca.org) champions the global workforce advancing trust in technology. For more than 55 years, ISACA has empowered its community of members with the knowledge, credentials, training, and network they need to thrive in fields like information security, governance, assurance, risk management, data privacy, and emerging tech—helping them to thrive in a rapidly changing digital landscape, drive trusted innovation, and ensure a more secure digital world. Among those credentials, ISACA advances and validates business-critical skills and knowledge through the globally respected Certified Information Systems Auditor^® (CISA^®), Certified in Risk and Information Systems Control^® (CRISC^®), Certified Information Security Manager^® (CISM^®), Certified in the Governance of Enterprise IT^® (CGEIT^®), and Certified Data Privacy Solutions Engineer^® (CDPSE^®) credentials. ISACA is a global professional association and learning organization that leverages the expertise of its more than 195,000+ members who work in digital trust fields such as information security, governance, assurance, risk, privacy, and quality. It has a presence in 195 countries, including 230 chapters worldwide. Through the ISACA Foundation, ISACA also expands IT and education career pathways, fostering opportunities to grow the next generation of technology professionals.

Disclaimer

ISACA has designed and created AAIR Review Manual primarily as an educational resource to assist individuals preparing to take the AAIR certification exam. It was produced independently from the AAIR exam and the AAIR Certification Committee, which has had no responsibility for its content. Copies of past exams are not released to the public and were not made available to ISACA for preparation of this publication. ISACA makes no representations or warranties whatsoever with regard to these or other ISACA publications assuring candidates’ passage of the AAIR exam.

Reservation of Rights

© 2026 ISACA. All rights reserved. No part of this publication may be used, copied, reproduced, modified, distributed, displayed, stored in a retrieval system, or transmitted in any form by any means (electronic, mechanical, photocopying, recording, or otherwise) without the prior written authorization of ISACA.

ISACA