AI certifications for auditors: AAIA, ISACA, the IIA and what each proves

ISACA's AAIA is the main exam-based AI credential for auditors, and it requires a CISA or similar designation. Here is what it and the other options cost, test and prove.

5 min readEmeri editorial

An illustration of a man in a blazer showing a printed page to a seated colleague, who holds a pen over an open notebook with a ticked checklist.

The main AI credential for auditors is ISACA's Advanced in AI Audit (AAIA). It is an exam-based certification open only to holders of a CISA or another qualifying designation. ISACA also sells an entry-level AI Fundamentals Certificate with a two-hour exam. The IIA offers a 16-hour hands-on course and a free AI auditing framework. Which one fits depends on whether you audit AI systems, use AI in your audits, or both.

Two jobs: auditing AI, and auditing with AI

Auditors meet AI in two ways. In the first, the AI system is the subject of the audit. The auditor assesses governance, data, model performance and controls over a tool the organization built or bought. In the second, the auditor uses AI as a tool while performing the audit.

PCAOB staff described the second job in a July 2024 Spotlight. They spoke with the U.S. global network firms and several other large firms. Those firms used generative AI mainly for administrative and research work, such as first drafts of memos and searches of internal guidance (PCAOB). The firms named areas where AI could help later:

  • Summarizing accounting policy and legal documents.
  • Checking audit documentation for completeness against documentation requirements.
  • Performing some risk assessment procedures and scoping the audit.
  • Checking financial statement disclosures for completeness.
  • Comparing amounts in the financial statements or notes with audited amounts.

The same firms told PCAOB staff that their supervision and review policies had not changed. Reviewers are expected to apply the same diligence to AI-assisted work as to any other work.

An engagement team member who uses a GenAI-enabled tool is still responsible for the results and documentation of the work.

The AI credentials auditors can take

Each entry comes from the issuer's own page. Prices are as listed by each issuer in October 2026.

  • Advanced in AI Audit, AAIA (ISACA): US$459 for members, US$599 for non-members, plus a US$50 application fee after you pass. You need an active CISA, or a qualifying designation such as CIA, CPA or ACCA with an IT audit or IT advisory focus. A computer-based exam covers three domains: AI governance and risk, AI operations, and AI auditing tools and techniques. You take it at a PSI test center or with remote proctoring (ISACA).
  • Artificial Intelligence Fundamentals Certificate (ISACA): US$120 for members, US$144 for non-members; no prerequisites. It is a two-hour, remotely proctored, multiple-choice exam with a pass mark of 65%. It splits evenly between AI concepts and AI implementations (ISACA).
  • Auditing Artificial Intelligence (AI): A Hands-On Course for Internal Auditors (The IIA): 16 CPE hours; online; advanced level. It ends in an audit simulation where you submit an AI audit closure memo or a readiness opinion letter. The IIA lists the price at checkout and does not mention a certificate or badge on the course page (The IIA).
  • Agentic AI Certificate Series (Surgent): $349 for five 2-credit modules, one of which covers autonomous agents in audit and assurance. Surgent issues a Credly badge after it verifies that all five modules are complete (Surgent).

The IIA's Artificial Intelligence Auditing Framework is not a credential. It is free to download, and its 2024 update includes a checklist for starting an AI assessment (The IIA). The IIA course above lists familiarity with it as a prerequisite.

What each credential proves

  • AAIA proves that an experienced IT auditor passed a proctored exam on auditing AI systems. Its value comes from the prerequisite as much as the exam.
  • The ISACA AI Fundamentals Certificate proves basic knowledge of AI concepts and risks. It suits an auditor new to the subject, or a team that wants a shared baseline.
  • The IIA course proves completion of a structured program with a written capstone deliverable. The page does not state a pass standard.
  • A completion badge, such as Surgent's, proves that you finished the modules. It does not test whether you can audit a model or use one safely.

None of these credentials tests the second job directly. No exam on the list asks you to run a real audit task with an AI tool and catch its errors. That skill is what the PCAOB firms described when they said reviewers must apply the same diligence to AI-assisted work.

How to choose

  1. If you hold a CISA and your team audits AI systems, AAIA is the credential built for that job.
  2. If you are a financial or operational auditor without a CISA, start with the AI Fundamentals Certificate. It has no prerequisites and costs less.
  3. If your function needs a method more than a credential, read the free IIA framework first. Then consider the IIA course for the staff who will lead AI audits.
  4. If you mainly use AI in your own audit work, a credential matters less than practice. Run a sample procedure with an AI tool, then compare every output line to the source evidence.

What an employer can verify

ISACA runs a public Verify a Certification tool. An employer enters the certificate number and the holder's last name, and the tool shows the status and expiry date (ISACA). The tool covers AAIA. Its list does not include the AI Fundamentals Certificate, so an employer would ask ISACA directly for that one. ISACA certifications run on a three-year CPE cycle. A lapsed AAIA shows as no longer valid.

For course certificates and completion badges, an employer can confirm that the badge exists and read what the course required. To see how a candidate audits AI-assisted work, a short practical exercise in the interview works better. The output verification checklist and the guide on checking the work list the checks to look for.

Where Emeri fits

Emeri sells an AI proficiency certification, so weigh this comparison with that in mind. Anyone can take the free check, a 15-minute check of how you work with AI. Emeri certification is assessed on real work tasks and reported as a band from E1 to E4 (bands). It measures how you use AI in your own work. It does not test how to audit an AI system, which is what AAIA covers.

For related roles, see AI certifications for accountants and AI certifications for risk managers.

Sources

  1. Advanced in AI Audit (AAIA). ISACA, .
  2. Artificial Intelligence Fundamentals Certificate. ISACA, .
  3. Verify a Certification. ISACA, .
  4. Auditing Artificial Intelligence (AI): A Hands-On Course for Internal Auditors. The IIA, .
  5. The IIA's Artificial Intelligence Auditing Framework. The IIA, .
  6. Spotlight: Staff Update on Outreach Activities Related to the Integration of Generative Artificial Intelligence in Audits and Financial Reporting. PCAOB, .
  7. Agentic AI Certificate Series for Tax, Accounting, Audit, Assurance & Finance Professionals. Surgent, .

Researched and drafted with AI. Checked against the sources above and approved for publication by Emeri’s editor. Read our editorial standards.

Every piece we publish is tried on real work and scored against the Emeri standard. See where your own skills stand with the free 15-minute check.

Get Emeri Weekly

AI for business, tested on real work. New tools, releases and how-tos, each tried on a real task and scored. One email a week.

We email you once to confirm. Unsubscribe in one click from any issue. See our privacy policy.

Related reading

An illustration of a woman at an office desk typing on a keyboard while holding a paper document, with stacked folders, a calculator and a desk phone nearby.

Guide

AI certifications for accountants: what each one costs and proves

AICPA & CIMA, ACCA and CPA Alberta all sell AI credentials for accountants. Most certify completion. One ends in an exam. Here is what each costs and what it proves.

An illustration of a lecturer gesturing beside a lectern that holds a rolled diploma, while students at tiered wooden desks listen and take notes.

Guide

AI certification vs degree: what each proves and which roles ask for it

A degree proves years of broad study. An AI certification proves one tested skill set at one point in time. Roles that build AI ask for degrees; roles that use AI rarely ask for either.

An illustration of an HR professional in a dark suit marking a clipboard document with a pen as she goes through it with a man seated across the desk.

Guide

AI certification for HR professionals: SHRM, HRCI and AIHR compared

SHRM, HRCI and AIHR each sell an AI credential for HR staff. Here is what each costs, how it is assessed, and the hiring laws that limit how HR can use AI.