AAISM Exam Format, Scoring and Retakes

The short version

The AAISM exam has 90 multiple-choice questions and a 150-minute limit. You need a scaled score of 450 on a scale of 200 to 800. You take it on a computer at a PSI testing center or at home with a remote proctor, and you can see a preliminary pass or fail on screen when you finish. These facts come from ISACA’s exam candidate guide (version 1.26) and its AAISM web pages, checked October 18, 2026.

Questions and time

Each question has a stem and four answer options, and exactly one is the best answer. The stem can be a question or an unfinished sentence. ISACA says the questions measure practical knowledge and the application of general concepts and standards, so expect situations rather than definitions.

The exam length is 90 questions in 2.5 hours. That works out to about 100 seconds per question if you spend the time evenly. ISACA also says the exam contains pretest items alongside the scored items. Pretest items are not used to calculate your score. Nothing in the candidate guide says how to spot them, so treat every question as if it counts.

Question qualifiers

ISACA’s exam tips tell you to read for qualifiers such as MOST likely or BEST. Many AAISM-style questions have two defensible answers, and the qualifier (or one condition in the scenario) picks between them. A useful habit is to underline the qualifier first, then the constraint in the scenario, and only then look at the options.

Scoring

ISACA reports a scaled score from 200 to 800. A scaled score is a conversion of your raw score to a common scale, so different versions of the exam stay comparable. A score of 450 or higher passes. You cannot convert 450 into a percentage of questions answered correctly, and ISACA does not publish that number, so be wary of any source that claims a percentage.

Your result report shows domain-level results, but ISACA says these are informational only. Your score is based on the total number of items answered correctly, regardless of domain. There is no penalty for wrong answers, so never leave a question blank.

Results timing

You can see your preliminary passing status on screen right after you finish. ISACA says the final score is emailed and available online within 10 working days. Scores are not given by phone or fax, and question-level results are not provided.

Delivery and languages

The exam is computer-based. You can sit it at an authorized PSI testing center or take it remotely proctored. On its AAISM page, ISACA says candidates in India, Mainland China, and Hong Kong must use a testing center. The candidate guide lists English, Spanish, and Japanese as exam languages. For remote exams, chat with the proctor is available in English only.

Registering and scheduling

Eligibility window. After you register and pay, you have six months to take the exam.
Scheduling. You can schedule an appointment as early as 48 hours after payment. Appointments open up to 90 days ahead.
Rescheduling. It is free if you do it at least 48 hours before the appointment. Inside 48 hours you must sit the exam or lose the registration fee.
Arriving late. ISACA says the registration fee is forfeited if you are more than 15 minutes late.
Changing language. You have to reschedule the appointment to change the exam language.

Exam day rules

You need one current, valid, original government-issued ID with your photo, signature, and a name that matches your registration. Digital and military IDs are not accepted. The workspace must be clear of notes, phones, watches, headphones, and any food or drink, including water. For a remote exam you complete a room scan and a mirror check before you start.

You may take one break of no more than ten minutes, with the proctor’s permission. The exam pauses, but the timer keeps running. Plan your pacing as if you will not take a break. Our study plan includes timed practice for this reason.

Retakes

ISACA allows four attempts within a rolling 12 months:

After a first failed attempt, you wait 30 days from the date of that attempt.
After a second failed attempt, you wait 90 days.
After a third failed attempt, you wait 90 days.

You register and pay for every attempt. If you pass, you cannot take the same exam again within the five-year window in which you may apply for the certification. If you do not pass, you may ask for a rescore in writing within 30 days of the results release.

After you pass

Passing the exam is one step. To become an AAISM holder you must also hold an active CISM or CISSP, submit the application, and follow ISACA’s Code of Professional Ethics and CPE policy. ISACA says you have five years from the pass date to apply.

To maintain it, ISACA’s AAISM page asks for at least 10 CPE hours each year and 30 over a three-year period, plus proof that your CISM or CISSP is active. ISACA’s general CPE policy documents mention other figures for other credentials, so check the current AAISM requirement on ISACA’s page and in your MyISACA account.

More guides for AAISM

Next step

Now that you know the shape of the exam, see how the content is split in domains explained. To practice under the same kind of time pressure, try our AAISM practice tests. ISACA’s AAISM page is the authority for every rule above.

Frequently asked questions

How many questions are on the AAISM exam?

ISACA says 90 multiple-choice questions, some of which may be unscored pretest items.

What score do I need?

A scaled score of 450 on a 200 to 800 scale.

Can I take the exam at home?

Yes, as a remotely proctored exam, except in India, Mainland China, and Hong Kong, where ISACA requires a testing center.

How long do I wait to retake it?

30 days after the first attempt, then 90 days after each later attempt, with at most four attempts in 12 months.

Try these practice exams