Directory / ISC2

ISC2 AI security certification (name not yet announced)

A planned vendor-neutral AI security certification from the issuer of CISSP, covering threats to AI systems alongside governance and risk.

What it signals

– Practical assessment: Not rated. Exam format not published. ISC2 certifications are typically proctored MCQ exams, but this has not been confirmed.
– Identity assurance: Not rated.
Depth: Professional. Professional level.
– Experience expected: Not rated. Eligibility/experience requirements not yet defined.
Portability: Vendor-neutral. Officially described as vendor-neutral.
– Verifiability: Not rated. Not yet issued. ISC2 normally provides Credly badges and member verification, which would rate 4 once operational.

For hiring managers

Not yet available: nobody can hold this certification until it becomes operational, which ISC2 expects in 2027. A pilot exam is expected by end of 2026.
Do not confuse it with ISC2's existing Building AI Strategy Certificate (launched July 2025: six on-demand courses, 16 hours, 16 CPEs). That is a course-completion learning certificate with no proctored exam, not a certification.
Development has been led by practitioners. ISC2 ran a Job Task Analysis with more than 1,000 survey responses and held workshops in the US, UK and Singapore, the same method it uses for CISSP/CCSP.
Expected scope mixes AI security engineering (threats such as prompt injection, data poisoning and model extraction, plus secure-by-design) with governance, risk and compliance. It is for security professionals, not AI application developers.
Vendor-neutral, from the issuer of CISSP. Once it is operational, ISC2's usual Credly badges and member verification should make it easy to verify.

Verifying it

Not yet issued. ISC2's usual practice for its certifications: Credly digital badges (one-click verification link) and the ISC2 Member Verification lookup. Assumed, not confirmed, for this credential.

What it covers

By topic

– GenAI apps: Not rated. Blueprint not published.
– Agents: Not rated. Blueprint not published; 'excessive agency' is mentioned only as a workshop discussion threat.
– Classical ML: Not rated. Blueprint not published.
– Operations: Not rated. Blueprint not published.
– Data: Not rated. Data protection is named as a development theme, but no weighting has been published.
Responsible AI: Core focus (over 35%). The whole credential is about AI security, risk and governance (securing AI systems, managing AI threats, mitigating AI risk, governance and oversight), so this would almost certainly be above 35%. Inferred, since no blueprint exists yet.

Exam details

Who the provider says it is for. Official: cybersecurity, information security and governance professionals, AI engineers, policymakers, risk leaders and others whose roles are evolving with AI; described as a 'vendor-neutral AI security standard for cybersecurity professionals'.

Renewal: Not finalized; CPE/maintenance requirements under development. Annual Maintenance Fee expected at US$135 in line with the ISC2 portfolio (official). ISC2 certifications normally require CPEs plus AMF; not confirmed for this credential.

Preparing

Not confirmed

These details were not available from an official source at the time of research.

Official name
Level (Professional is an inference)
Exam price, duration, question count, formats, passing score and delivery
Experience/eligibility requirements and whether endorsement is required
Exam domains and weights
CPE requirements and validity period
Exact pilot exam date and operational date within 2027
That Credly badges and member verification will apply (assumed from ISC2's standard practice)

Sources (8)