AI Governance & IT Audit Writing | Baz Abouelenein

Articles on AI governance, AI audit, and IT audit — the EU AI Act, NIST AI RMF, ISO/IEC 42001, and certification topics — by a higher-education CIO and certified IT auditor.

  • AAIA Certification 2026: Cost, Eligibility, Worth It? - AAIA certification cost, eligibility requirements, exam format, and an honest take on whether it is worth it in 2026.
  • How Hard Is the AAIA Exam? An Honest First-Attempt Answer - A first-attempt pass perspective on exam difficulty, domain weighting, and what actually trips candidates up.
  • How to Pass the AAIA Exam: A First-Attempt Playbook - A six-week study plan, scenario question heuristics, and domain-by-domain guidance from a first-attempt pass.
  • AAIA Exam Domains Explained: Where IT Auditors Struggle - The AAIA exam divides into three domains weighted 33/46/21. Most IT auditors pass Domain 1 and struggle with Domain 2.
  • From CISA to AAIA in 90 Days: Bridging the Knowledge Gap - Maps the five knowledge gaps between the CISA and AAIA credentials and how to close each one in 90 days.
  • AAIA vs AAISM vs AIGP: Which AI Cert Fits Your Role? - Three credentials dominate AI governance in 2026: ISACA AAIA, ISACA AAISM, and IAPP AIGP. Here is how to choose.
  • AAIA vs AAISM vs AAIR: ISACA's Three AI Certs Compared - ISACA now has three AI credentials. This guide maps each to the role it fits and explains when stacking makes sense.
  • AAIA Salary: What AI Auditors Actually Earn in 2026 - The real compensation data for AI auditors, sourced from job postings and salary surveys, not inflated estimates.
  • The IT Auditor's Field Guide to Auditing AI Systems - A six-stage, evidence-first program for auditing AI systems, mapped to ISO/IEC 42001, NIST AI RMF, and the EU AI Act.
  • EU AI Act High-Risk Deadline Moved to December 2027 - The substantive obligations did not move. Here is what IT auditors must verify before the new deadline.
  • AAIA Study Guide: Domain-by-Domain Plan to Pass First Try - A domain-by-domain study plan weighted to the 33/46/21 blueprint, with scenario-question strategy and a 4-to-6-week schedule.
  • AAIA vs CISA: Which ISACA Certification Should You Get First? - ISACA will not certify you in AAIA without an active qualifying credential, and pulls it if that credential lapses. Which to earn first, and the full 16.

Not affiliated with or endorsed by ISACA, ISC², or PMI.

AAIA, CISA, CISM, and CRISC are registered trademarks of ISACA. CISSP is a registered trademark of ISC². PMP is a registered trademark of PMI. IT Audit Prep is not affiliated with, endorsed by, or sponsored by ISACA, ISC², or PMI.