ISACA AAIR Exam Prep Book 2026 with Apoorva Sharma

An unofficial 589-page study book mapped to every domain and subtopic of the ISACA AAIR exam content outline, by Mumbai lawyer Apoorva Sharma.

This ISACA AAIR exam prep book is a 589-page unofficial study guide for the Advanced in AI Risk (AAIR) certification, written by Apoorva Sharma, a lawyer based in Mumbai, India. Its 45 chapters follow the three domains of ISACA's published AAIR exam content outline (AI Risk Governance and Framework Integration; AI Life Cycle Risk Management; AI Risk Program Management) and connect the EU AI Act as amended in 2026, the NIST AI RMF, ISO/IEC 42001, OWASP's LLM and agentic Top 10 lists, SR 26-2 and India's DPDP regime to day-to-day AI risk practice. It is delivered as PDF and editable DOCX.

Key facts

• Author: Apoorva Sharma, lawyer, Mumbai, India
• Exam: ISACA AAIR (Advanced in AI Risk)
• Edition: 2026 edition (October 2026); law and standards stated as at 1 October 2026
• Length: 589 pages, 45 chapters in four parts, six appendices
• Format: PDF + editable DOCX (Word), instant download
• Price: ₹4,000 / US$49

What is the ISACA AAIR exam?

Advanced in AI Risk (AAIR) is an ISACA credential for experienced risk professionals who identify, assess and manage the risks of AI. ISACA's published outline has three domains: AI Risk Governance and Framework Integration (37%), AI Life Cycle Risk Management (21%) and AI Risk Program Management (42%), plus 23 "other skills tested". The examination has 90 multiple-choice questions in 150 minutes, scored on a 200–800 scale with 450 to pass. Check ISACA's candidate information for current eligibility, fees and scheduling.

Who is this AAIR study guide for?

• Candidates preparing for the ISACA AAIR examination.
• Holders of CRISC, CISA, CISM or CGEIT extending their practice to AI risk.
• Risk, compliance, audit, model-risk and technology leaders who must assess and evidence how their organisation manages AI risk.

What's inside?

• AAIR Exam Prep: A Study Book on AI Risk Management for the ISACA Advanced in AI Risk Examination, 2026 edition, 589 pages, PDF.
• The same book as an editable DOCX (Word) file.
• A one-page Start Here guide with the domain map, 4-, 6- and 8-week reading plans and the disclaimer.

What does the AAIR book cover?

• Part I, AI Risk Governance and Framework Integration (Ch 1–19): AI essentials; strategy and the value–risk balance; the NIST AI RMF and GenAI profile; ISO/IEC 42001, COBIT and COSO; ERM integration; operating model; accountability; human oversight at critical decision points; policies; literacy and culture; the EU AI Act as amended by the 2026 Digital Omnibus; the US, UK and beyond; India and Asia-Pacific; privacy, IP and liability; financial-services model risk (SR 26-2, PRA SS1/23, MAS, RBI); sector perspectives; fairness; transparency and safety; ethics and ESG.
• Part II, AI Life Cycle Risk Management (Ch 20–27): design-stage risk; build, buy or adapt; data governance; inventories and AI-BOMs; training risk and drift; TEVV; deployment and change; operations, monitoring and decommissioning.
• Part III, AI Risk Program Management (Ch 28–42): the AI threat landscape; generative and agentic AI; scenarios and bow-ties; assessment and quantification; treatment; control design; assurance; KRIs; board reporting; AI in the risk function; third-party and foundation-model risk; incident response; BIA and continuity.
• Part IV (Ch 43–45): two integrated cases and examination technique with worked questions.
• Appendices: templates and checklists; an AI control crosswalk; a 54-indicator KRI library; a regulatory timeline; a 40-scenario risk library; an outline map and readiness self-assessment. Then a 442-term glossary, domain summary sheets, a bibliography of primary sources and an index.

Every chapter opens with learning objectives and closes with key terms, a summary and check questions. Worked examples run through four fictional organisations: an Indian bank, a European insurer, an Indian logistics platform and a UK hospital group.

Does the book include practice questions?

Yes. Every chapter closes with check questions, and Chapter 45 explains ISACA-style question technique with worked questions. All questions are original. For full-length practice, the AAIR Exam Prep Kit (Book + Mock Exams) adds a 96-page volume with a 168-question chapter bank and two 90-question mock exams, for ₹5,000 / US$59.

Who wrote this AAIR study guide?

Apoorva Sharma is a lawyer based in Mumbai, India, with more than eight years of experience in data privacy (including India's Digital Personal Data Protection Act, 2023), Trust and Safety, and commercial and regulatory work at Uber, Junglee Games (Flutter Entertainment) and Adfactors PR.

Format and delivery

• Instant download after purchase: one ZIP file (about 2.5 MB).
• Searchable, printable PDF and an editable DOCX (Word) version.
• Text-only; no video is included.

Frequently asked questions

Is this an official ISACA AAIR study guide?

No. It is an independent, unofficial study guide written by Apoorva Sharma and is not affiliated with, endorsed by or sponsored by ISACA. Nothing in it is drawn from ISACA review manuals, question databases or examination items.

Does it follow the published AAIR exam content outline?

Yes. Parts I to III correspond to the three domains, and Appendix F maps every subtopic (1A–1F, 2A–2D, 3A–3F) to chapters; the Introduction maps the 23 other skills tested.

Should I buy the Book or the Book + Mock Exams kit?

Choose the Book for the full text, templates and libraries. Choose the kit if you also want 348 original practice questions, including two timed 90-question mock exams with explanations.

Disclaimer

Unofficial study guide. Not affiliated with, endorsed by, or sponsored by ISACA. AAIR is a trademark of ISACA. All practice questions are original; no result is guaranteed. The material is educational and is not legal advice.