ISC2 Developing AI Security Certification for Cyber Professionals
ISC2, the world's largest nonprofit association for cybersecurity professionals, has announced the creation of a new certification focused on artificial intelligence (AI) security. As part of the initiative, the organization is inviting cybersecurity practitioners worldwide to volunteer their expertise in defining the knowledge, skills and competencies required to secure AI technologies, manage AI-related threats and reduce associated risks. Developed using ISC2's practitioner-driven certification methodology, the new credential is intended to become a globally recognized, vendor-neutral benchmark for AI security expertise.
With AI being rapidly integrated into enterprise operations and cybersecurity workflows, security professionals are increasingly expected to safeguard AI-powered systems. Despite this growing responsibility, the industry currently lacks an internationally accepted certification that validates AI security capabilities.
"The cybersecurity community has made it clear that there is a strong need for practical and credible ways to demonstrate AI security expertise," said Casey Marks, Ph.D., Chief Operating Officer of ISC2. "This certification is being created to address that need by helping professionals and employers verify AI security competencies, strengthen the cybersecurity workforce and increase confidence in organizations' ability to protect AI-driven environments."
Standards-Based Development
As AI continues to reshape cybersecurity operations—from reviewing AI-generated outputs and supervising automated systems to making critical risk management decisions—ISC2 is assembling cybersecurity professionals from across the globe to help establish a vendor-neutral certification framework.
The development process will identify how traditional cybersecurity principles are being applied within AI-enabled environments. Areas under evaluation include AI risk management, secure-by-design practices, data security, governance, oversight and other essential security disciplines. Input from experienced practitioners will determine the tasks, knowledge domains and practical skills that will form the basis of the certification and its future examination.
Industry Participation
ISC2 is encouraging cybersecurity professionals, whether members or non-members, to participate voluntarily in the certification's development. Their contributions will help ensure the credential accurately reflects current industry practices and the competencies organizations expect from AI security professionals.
Volunteers will have opportunities to:
With AI being rapidly integrated into enterprise operations and cybersecurity workflows, security professionals are increasingly expected to safeguard AI-powered systems. Despite this growing responsibility, the industry currently lacks an internationally accepted certification that validates AI security capabilities.
"The cybersecurity community has made it clear that there is a strong need for practical and credible ways to demonstrate AI security expertise," said Casey Marks, Ph.D., Chief Operating Officer of ISC2. "This certification is being created to address that need by helping professionals and employers verify AI security competencies, strengthen the cybersecurity workforce and increase confidence in organizations' ability to protect AI-driven environments."
Standards-Based Development
As AI continues to reshape cybersecurity operations—from reviewing AI-generated outputs and supervising automated systems to making critical risk management decisions—ISC2 is assembling cybersecurity professionals from across the globe to help establish a vendor-neutral certification framework.
The development process will identify how traditional cybersecurity principles are being applied within AI-enabled environments. Areas under evaluation include AI risk management, secure-by-design practices, data security, governance, oversight and other essential security disciplines. Input from experienced practitioners will determine the tasks, knowledge domains and practical skills that will form the basis of the certification and its future examination.
Industry Participation
ISC2 is encouraging cybersecurity professionals, whether members or non-members, to participate voluntarily in the certification's development. Their contributions will help ensure the credential accurately reflects current industry practices and the competencies organizations expect from AI security professionals.
Volunteers will have opportunities to:
- Participate in Job Task Analysis (JTA) surveys.
- Join exam item development workshops.
- Assist with examination design and validation.
- Sit for the pilot certification examination.
Marks emphasized that practitioner involvement will play a key role in establishing a trusted global standard for AI security, enabling organizations to better identify and validate professionals with specialized expertise in securing AI systems.
Individuals interested in contributing can find additional information and register their interest through the ISC2 website.
Development Timeline
ISC2 has already begun the initial planning and definition phase of the certification. This will be followed by content development and a pilot examination later in the year. The organization plans to provide regular updates on project milestones, opportunities for community participation and certification progress. The pilot version of the AI Security certification is expected to be available by the end of 2026.
AI Spotlight Event
To further promote discussion on the intersection of AI and cybersecurity, ISC2 is organizing a two-day virtual "ISC2 Spotlight: Artificial Intelligence" event on July 14–15. During the event, Thomas Jackson, CISSP, Senior Exam Content Development Manager, and Willard Smith, CISSP, Exam Content Developer, will present a session titled "The AI Pivot: Safeguarding the Future of ISC2 Certifications." Scheduled from 9:00 a.m. to 9:45 a.m. EDT on July 15, 2026, the session will provide an overview of the AI security certification initiative and explain how cybersecurity professionals can participate in its development.
ISC2 Members can register here for this event, which is totally free of any charge.
Click here to know more about the ISC2 AI security certification program and volunteer opportunities.
Individuals interested in contributing can find additional information and register their interest through the ISC2 website.
Development Timeline
ISC2 has already begun the initial planning and definition phase of the certification. This will be followed by content development and a pilot examination later in the year. The organization plans to provide regular updates on project milestones, opportunities for community participation and certification progress. The pilot version of the AI Security certification is expected to be available by the end of 2026.
AI Spotlight Event
To further promote discussion on the intersection of AI and cybersecurity, ISC2 is organizing a two-day virtual "ISC2 Spotlight: Artificial Intelligence" event on July 14–15. During the event, Thomas Jackson, CISSP, Senior Exam Content Development Manager, and Willard Smith, CISSP, Exam Content Developer, will present a session titled "The AI Pivot: Safeguarding the Future of ISC2 Certifications." Scheduled from 9:00 a.m. to 9:45 a.m. EDT on July 15, 2026, the session will provide an overview of the AI security certification initiative and explain how cybersecurity professionals can participate in its development.
ISC2 Members can register here for this event, which is totally free of any charge.
Click here to know more about the ISC2 AI security certification program and volunteer opportunities.
Companies