# ISC2 publishes the outline of its new AI security certification exam People who secure AI systems, and the employers who hire them, can now see what the new credential will test. The Assurance Desk, news. Published 27 October 2026. ISC2, a non-profit member organisation for cyber security professionals, released the pilot exam outline for its new AI security certification on 26 October 2026. If the pilot succeeds, the certification will launch in 2027 ([prnewswire.com, ISC2 Releases AI Security Certification Pilot Exam Outline](https://www.prnewswire.com/news-releases/isc2-releases-ai-security-certification-pilot-exam-outline-302918235.html), checked 27 October 2026). ## The exam covers AI security from design to governance ISC2 says the certification is for people who secure the design, deployment and maintenance of AI and machine learning systems ([prnewswire.com, ISC2 Releases AI Security Certification Pilot Exam Outline](https://www.prnewswire.com/news-releases/isc2-releases-ai-security-certification-pilot-exam-outline-302918235.html), checked 27 October 2026). The exam's areas run from AI concepts and security fundamentals to governance, risk and compliance. They also cover data and model security, secure architecture, operations and incident response, and AI threats and testing. The list below gives each area's full name ([prnewswire.com, ISC2 Releases AI Security Certification Pilot Exam Outline](https://www.prnewswire.com/news-releases/isc2-releases-ai-security-certification-pilot-exam-outline-302918235.html), checked 27 October 2026). The outline draws on input from nearly 10,000 volunteer professionals worldwide. Casey Marks, ISC2's chief operating officer, said the pilot gives critical evidence on whether the exam measures AI security competence fairly and reliably ([prnewswire.com, ISC2 Releases AI Security Certification Pilot Exam Outline](https://www.prnewswire.com/news-releases/isc2-releases-ai-security-certification-pilot-exam-outline-302918235.html), checked 27 October 2026). **The areas of practice in ISC2's pilot exam outline** - AI concepts and security fundamentals - AI governance, ethics, risk and compliance - AI data management, privacy and model security - Secure AI architecture, engineering and identity and access management - Secure AI operations and incident response - AI threats, testing and lifecycle management The areas as ISC2 names them in its pilot exam outline of 26 October 2026. Each area has its own topics and subtopics. Source: prnewswire.com, ISC2 Releases AI Security Certification Pilot Exam Outline, https://www.prnewswire.com/news-releases/isc2-releases-ai-security-certification-pilot-exam-outline-302918235.html (checked 27 October 2026) ## Four years of experience, or an existing ISC2 credential Candidates need at least four years of paid full-time experience in cyber security or AI-related fields. Two of those years must be in cyber security, and one year must be in two or more of the exam's areas ([prnewswire.com, ISC2 Releases AI Security Certification Pilot Exam Outline](https://www.prnewswire.com/news-releases/isc2-releases-ai-security-certification-pilot-exam-outline-302918235.html), checked 27 October 2026). An active CISSP, ISSAP, ISSEP, ISSMP, CCSP or CSSLP credential can replace the whole experience requirement. Candidates do not need to hold an ISC2 certification ([prnewswire.com, ISC2 Releases AI Security Certification Pilot Exam Outline](https://www.prnewswire.com/news-releases/isc2-releases-ai-security-certification-pilot-exam-outline-302918235.html), checked 27 October 2026). ## The pilot exam runs from mid-December Approximately 3,000 qualified volunteers will be selected to sit the pilot exam from mid-December to late January. Anyone who wants to take part can submit their interest through ISC2's volunteer form by 4 November ([prnewswire.com, ISC2 Releases AI Security Certification Pilot Exam Outline](https://www.prnewswire.com/news-releases/isc2-releases-ai-security-certification-pilot-exam-outline-302918235.html), checked 27 October 2026). If the pilot is successful, ISC2 says the certification will become operational and launch in 2027 ([prnewswire.com, ISC2 Releases AI Security Certification Pilot Exam Outline](https://www.prnewswire.com/news-releases/isc2-releases-ai-security-certification-pilot-exam-outline-302918235.html), checked 27 October 2026). ## In the UK, AI security training is in a voluntary code The UK government's Code of Practice for the Cyber Security of AI is voluntary. It is meant to help create a global standard at the European Telecommunication Standards Institute (ETSI) ([GOV.UK, Code of Practice for the Cyber Security of AI](https://www.gov.uk/government/publications/ai-cyber-security-code-of-practice/code-of-practice-for-the-cyber-security-of-ai), checked 27 October 2026). Its first principle is to raise awareness of AI security threats and risks. The code says cyber security training shall include AI security content, tailored to the roles and responsibilities of staff ([GOV.UK, Code of Practice for the Cyber Security of AI](https://www.gov.uk/government/publications/ai-cyber-security-code-of-practice/code-of-practice-for-the-cyber-security-of-ai), checked 27 October 2026). ## Read next - [AI governance: the section](https://theassurancedesk.com/ai-governance) - [Is there a qualification or certification for AI governance?](https://theassurancedesk.com/guides/ai-governance-qualifications-and-certification) - [What is AI governance, in plain words?](https://theassurancedesk.com/guides/what-is-ai-governance) - [Seeking ISO 42001 certification](https://theassurancedesk.com/best/certification-seeking) ## Sources - prnewswire.com, ISC2 Releases AI Security Certification Pilot Exam Outline: https://www.prnewswire.com/news-releases/isc2-releases-ai-security-certification-pilot-exam-outline-302918235.html (checked 27 October 2026) - GOV.UK, Code of Practice for the Cyber Security of AI: https://www.gov.uk/government/publications/ai-cyber-security-code-of-practice/code-of-practice-for-the-cyber-security-of-ai (checked 27 October 2026) This is an independent editorial guide, not legal advice. --- **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here.