ISC2 plans first AI security certification for early 2027

ISC2 has announced that the first AI security certification for CISSP-level professionals is expected to be available in early 2027, with a pilot exam phase opening on 26 October 2026. The nonprofit behind the CISSP credential disclosed at Security Congress 2026 in Denver that the exam is being developed by cybersecurity professionals for cybersecurity professionals.

Initial input to shape the credential came from around 10,000 volunteers worldwide through Job Task Analysis surveys, and ISC2 is seeking 3,000 volunteers to enroll in a beta version of the exam in December 2026, with interest submissions due by 4 November.

The six domains slated for the pilot cover AI concepts and security fundamentals; AI governance, ethics, risk and compliance; AI data management, privacy and model security; secure AI architecture, engineering and IAM; secure AI operations and incident response; and AI threats, testing and lifecycle management. Casey Marks, ISC2 COO, described the pilot as a means to gather evidence on whether the exam reliably, fairly and defensibly measures AI security competence.

Eligibility is broad: the credential will be open to ISC2 members and non-members, including those who already hold other ISC2 credentials; candidates must typically have at least four years of cumulative, paid full-time experience in cybersecurity or AI-related fields, with two years in cybersecurity and one year in two or more of the domains. Existing ISC2 credentials such as CISSP, ISSAP, ISSEP, ISSMP, CCSP or CSSLP may be substituted for the experience requirement.