ISACA's New AI Security Certification: Is It Worth It? | Keatron Evans & Kirsten Lora

— Learn about ISACA AAISM training: https://www.infosecinstitute.com/cour...
— View course dates: https://www.infosecinstitute.com/cour...
— Download ISACA AI Policy Template: https://www.infosecinstitute.com/glob...

One in four CISOs has already experienced an AI-generated attack this year. Even more concerning? IBM's 2025 research found 63% of breached organizations had no AI policies in place — leaving them exposed to attacks that now cost U.S. organizations an average of $10.2 million.

Enter ISACA's Advanced in AI Security Management (AAISM) certification, the industry's answer to the AI security governance problem. Designed exclusively for CISM and CISSP holders, AAISM validates your ability to govern, assess and secure AI implementations at the enterprise level. Organizations with extensive AI security measures save $1.9 million in breach costs compared to those without — and this certification equips you to build that protection.

Join Kirsten Lora, VP Product at ISACA, and Keatron Evans, VP of Portfolio Product and AI Strategy at Infosec, to learn:

0:00 - Introduction: AI security challenges and adoption stats
3:45 - Poll: Do you have CISM or CISSP certification?
4:21 - Why CISM or CISSP is required for AAISM
5:40 - Deep dive: ISACA's new AAISM certification explained
9:09 - Three domains covered in the certification
12:18 - The 63% problem: Organizations without AI policies
14:55 - Building AI policies: Getting stakeholders involved
16:41 - Download: Free ISACA AI policy template
17:09 - Leadership pressure: Moving fast vs. security governance
21:01 - New AI risks and how to approach them differently
23:32 - First steps: Building an AI governance program
25:21 - AI skills: Does your team need an AI specialist?
26:30 - Career paths: New opportunities in AI security
29:00 - Infosec's AAISM training program overview
32:00 - Q&A: Use cases for selling AI governance to leadership
33:09 - Real-world threats: Deepfakes, phishing, and exploit development
35:20 - Technical background needed for AAISM
37:06 - What makes Infosec's training different
39:31 - Final thoughts on AI security management's importance

About Infosec
Infosec's mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ's security awareness training. Learn more at infosecinstitute.com.