ISC2 Develops AI Security Certification for Cyber Professionals

ISC2 Develops AI Security Certification for Cyber Professionals

ISC2, the nonprofit organization behind the widely recognized CISSP cybersecurity credential, is developing a new certification focused specifically on AI security. The credential will cover securing AI systems, managing AI-related threats, and mitigating risks associated with artificial intelligence deployment.

The certification's exact scope and target audience will be determined over the next five months as ISC2 collaborates with cybersecurity professionals to define the program's body of knowledge, according to ISC2 CEO Scott Beale.

Why it matters

As AI capabilities become embedded in cybersecurity roles, organizations need standardized ways to assess whether candidates and employees possess the specialized knowledge to secure AI systems. A vendor-neutral credential from an established certification body could help professionalize this emerging discipline and give workers a clear path to demonstrate competence.

Distinct from existing credentials

The decision to create a standalone AI security certification reflects ISC2's assessment that the field has matured beyond what can be covered in existing exams. The organization added AI-related questions across all nine of its current certifications last year, but demand for a dedicated credential persisted.

Beale told Axios that members and employers continued requesting a vendor-neutral certification focused exclusively on AI security. The topic has become one of the most frequent questions he receives from the cybersecurity community.

ISC2's certifications, including CISSP, are among the industry's most recognized credentials. Employers frequently use them as indicators of technical knowledge and practical experience when evaluating candidates.

Target audience and timeline

The certification is expected to target professionals with some cybersecurity experience, though not necessarily senior practitioners. It may also attract AI professionals who increasingly need security expertise as they deploy machine learning systems and other AI technologies.

ISC2 is currently recruiting volunteers from across the cybersecurity community to help define the certification's body of knowledge and develop exam questions. The organization aims to begin beta testing the certification in early 2027.

The development timeline suggests ISC2 is taking a deliberate approach to ensure the credential reflects current industry needs and maintains the rigor associated with its existing certification programs.

These details were first reported by Axios.