TL;DR: ISC2, the nonprofit behind the CISSP, is building a new vendor-neutral AI security certification, and as of October 14, 2026 it does not exist as an exam you can book. ISC2 announced the development effort on July 15, 2026 and says it expects a pilot exam by the end of 2026, with the credential becoming operational in 2027. The name is not final (the working title is “AI Security Certification”), and prerequisites, exam domains, pricing, experience requirements and renewal rules are all undecided. ISC2 is recruiting volunteers worldwide, members and non-members, to help define the content and take the pilot. That makes this a different thing from the ISC2 AI Security Certificate (a set of on-demand courses launched in 2025) and from the AI content ISC2 has already folded into its existing exams. The sources we read also disagree on timing: ISC2’s pages point to a late-2026 pilot, while Axios reported beta testing in early 2027. This guide sorts what is decided from what is not, and gives you a plan for the months before the exam arrives.
If you landed here looking for exam dumps, a study guide or a booking link for the new credential, none of those can be real yet. The ledger below shows why.
Quick Facts
| Item | What we found |
| Status | In development. No exam is available |
| Working title | “AI Security Certification”. ISC2 says the official name has not been determined |
| First announced | July 15, 2026 (ISC2 press release) |
| What ISC2 says it is | A vendor-neutral credential to define and validate the skills needed to securely design, implement and manage AI systems |
| Pilot exam | Anticipated late 2026. Registration, fees and scheduling details still to come |
| Operational | Not expected until 2027 |
| Who can help build it | ISC2 members and non-members worldwide, through surveys, item workshops, exam development and taking the pilot |
| Volunteer reward | Continuing professional education credits |
| Prerequisites | Not defined. ISC2 has not decided whether existing certifications can count toward experience waivers |
| Price | Not set. ISC2 expects the annual maintenance fee to align with its portfolio at US$135 |
| Courses | None for the pilot. Official courses are expected once the certification is operational |
| Days from today (October 14, 2026) to December 31, 2026 | 78 |
ISC2’s own pages are the source for every row above, apart from the Axios timing report, which is labeled where it appears. Pages and statements from third parties are attributed by name and not linked. No salary data appears in this guide, because none we found isolates holders of this credential, which does not exist yet.
The Ledger: Decided and Undecided
Most articles on this topic repeat the announcement and add speculation. This ledger keeps the two apart, one row at a time.
| Question | Decided? | What ISC2 says |
| Will it be a certification, with renewal? | Yes | A formal credential requiring continuing education and renewal, unlike the one-time AI Security Certificate |
| Is it vendor neutral? | Yes | ISC2 describes it as a vendor-neutral standard built through a practitioner-led process |
| What is it called? | No | “The name of the certification has not yet been determined” |
| What will the exam cover? | No | Domains are not finalized. ISC2’s pages list role areas, not exam domains |
| Who is it for? | Partly | Professionals whose roles are changing as AI enters cybersecurity work, and roles that will need dedicated AI systems security expertise |
| Is there an experience requirement? | No | To be set during development |
| Can existing certifications count toward it? | No | ISC2 has not decided whether they can count toward experience waivers |
| What will it cost? | No | Exam price and registration details are still to come |
| What will the annual fee be? | Expected | ISC2 expects an annual maintenance fee in line with its portfolio at US$135 |
| How many CPE credits will renewal need? | No | CPE requirements are undetermined |
| When can I sit it? | Not yet | A pilot exam is anticipated in late 2026. Operational in 2027 |
| Will there be an official course? | Later | Not for the pilot. Official courses follow once operational |
How to read the “Expected” row
The US$135 figure is ISC2’s expectation that the new credential’s annual maintenance fee will align with its portfolio. It is not a published fee for this certification. We include it because candidates ask about it, and we mark it as an expectation for that reason.
The Three Phases ISC2 Describes
ISC2 says the program uses three phases. The tracker below shows where each sits.
| Phase | What happens | Status as of October 14, 2026 |
| Definition | Practitioners define the knowledge, skills and abilities. Job Task Analysis surveys set scope and audience | Under way. ISC2 said in July the definition phase begins immediately |
| Development | Item development workshops write the pilot exam questions | Planned for later in 2026 |
| Delivery | Pilot administration, then analysis of results | Pilot anticipated late 2026. Analysis follows |
What a pilot exam is
ISC2’s FAQ says passing the pilot exam could lead to certification if the pilot succeeds and the exam becomes operational. Pilot candidates receive a pilot exam outline beforehand. In plain terms, the pilot is how the exam gets tested before it becomes a standard exam. It is a real exam with real questions, but ISC2 has not said how pilot results will convert to credentials, so treat any promise of that as unconfirmed until ISC2 publishes pilot terms.
The countdown
| Date | Days from today | Milestone |
| July 15, 2026 | n/a | ISC2 press release announces the effort |
| October 14, 2026 | 0 | You are here. No pilot registration is published |
| December 31, 2026 | 78 | End of the “late 2026” window ISC2 gives for a pilot exam |
| Early 2027 | n/a | Timing Axios reported for beta testing |
| 2027 | n/a | ISC2 says the credential is not expected to be operational before then |
If you want to be in the first group to sit it, the practical date to watch is the end of the year. If the pilot slides into early 2027, the Axios timing would turn out to be the better guess.
The Sources Disagree on Timing
We found two timelines.
| Source | What it says |
| ISC2’s developing-AI-certification page | A pilot exam is anticipated in late 2026. The certification is not expected to become operational until 2027 |
| ISC2’s July 15 press release, as reproduced in trade coverage | A pilot exam is planned by the end of 2026 |
| Network World (July 24, 2026) | A pilot exam is planned before the end of 2026 |
| Axios (July 21, 2026) | ISC2 will define scope and audience over the next five months, and hopes to begin beta testing in early 2027 |
These are compatible if “define over five months” runs to roughly December 2026 and the pilot follows. They are not compatible if the pilot truly arrives before January. We cannot settle it from the sources, so the guide gives the range: pilot late 2026 or early 2027, operational in 2027. One more wrinkle: the ISC2 page carries a date of September 25, 2026 near its headline, which is not clearly labeled as a posting date, so we treat it as an update date and nothing more.
Certification, Certificate or Exam Guidance? Three Different Things
ISC2 has three AI-related items, and the names are close enough that they get confused.
| Item | What it is | Exam? | Status |
| AI Security Certification | A new formal credential with renewal | Yes, a pilot exam is planned | In development |
| AI Security Certificate | Six on-demand courses, about 16 hours in total, announced July 31, 2025 | No. Completing the courses is the requirement | Available |
| Exam Guidance for Artificial Intelligence | A guide showing where AI security concepts appear in ISC2’s exams, published April 2, 2026 | Not applicable | Published |
The certificate, in more detail
ISC2’s 2025 announcement lists six courses: AI for Cybersecurity, AI Security: Managing Overconfidence, Aligning with Global AI Regulations, Foundations of AI, Planning for Secure by Design AI, and The Evolving Cybersecurity Workforce. ISC2 members can earn 16 CPE credits on completion and get a 20% discount on individual courses. One naming oddity: the release’s headline calls it an “AI Security Certificate” while its body names it the “Building AI Strategy Certificate”. We use the headline name here and flag the inconsistency. No base price appeared in the release we read.
The exam guidance, in more detail
ISC2’s April 2, 2026 guidance says AI security concepts already appear across more than 50 core exam domains in its portfolio, as part of a three-year exam refresh cycle. ISC2 did not give effective dates in the coverage we read. The new certification is meant for more specialized AI roles beyond that scope. For you, this means your existing ISC2 exam prep already touches AI topics, and the new credential will go deeper.
Who the Credential Is Likely to Target
ISC2’s page lists seven areas where AI security responsibilities are emerging. These are role areas, not exam domains, but they show who ISC2 has in mind.
| Area ISC2 lists | A plain-language reading |
| Security and Risk Management | Policy, risk decisions and governance of AI use |
| Security Architecture and Engineering | Designing AI systems securely |
| Communication and Network Security | Protecting AI data in transit and AI services on networks |
| Security Assessment and Testing | Testing AI systems for weaknesses |
| Security Operations | Detecting and responding to AI-related incidents |
| Software Development Security | Building AI-enabled software safely |
| Governance, Risk and Compliance | Aligning AI use with rules and standards |
ISC2’s July announcement also names the principles it will examine in AI-shaped environments: risk management, secure-by-design methodology, data protection, and governance and oversight. Six of the seven area names match CISSP domain names, which suggests the credential will be broad rather than narrow. That is our observation, not an ISC2 statement.
Who it is not obviously for
ISC2 says experience requirements are not yet set. Axios reported that the certification is expected to target professionals with some cybersecurity experience rather than only veterans, and that it could appeal to AI professionals. Treat that as a report, not a rule.
Why ISC2 Says It Is Building This
Two ISC2 executives have explained the thinking in public, and the explanations agree. ISC2’s chief operating officer, Casey Marks, said in the July announcement that professionals need practical, credible ways to demonstrate readiness for the security demands of AI. Axios reported ISC2’s chief executive, Scott Beale, saying that members wanted the credential and that industry had been expressing interest in it. ISC2’s own page adds the underlying gap: it says no shared standard for AI security expertise exists yet.
| Reason given | Who said it |
| Professionals need a credible way to show AI security readiness | ISC2 chief operating officer, July 2026 announcement |
| Members and industry have asked for it | ISC2 chief executive, as reported by Axios |
| No shared standard for AI security expertise exists | ISC2’s certification page |
None of these statements describes exam content, so they do not settle the open questions above. They do explain why the program is practitioner-led, with surveys and workshops before any exam is written.
What to Take While You Wait
The credential cannot be booked, so the useful question is what to study now that will still count later. The table sorts by situation. Fees and exam formats are not repeated here, so check each exam’s page and ISC2’s pages before you book.
| Your situation | A reasonable move now | Why |
| New to security | CC (Certified in Cybersecurity) | ISC2’s exam guidance says AI concepts are already part of its exam domains. A foundation helps whichever credential you add next |
| Several years in security, no senior credential | CISSP | A broad base, and a likely feeder for the new credential’s experience path. ISC2 has not said so, so this is our reading |
| Cloud security focus | CCSP | AI systems mostly run in the cloud. Our CCSK vs CCSP comparison covers the cloud track |
| Choosing between security and management tracks | Read our CISSP vs CISM guide | The AI credential will sit beside whichever track you pick |
| Already holding an ISC2 credential | Watch ISC2’s volunteer page | Volunteers earn CPE credits, and ISC2 invites members and non-members |
| Want an AI security credential this year | Look at existing options such as ISACA’s AAISM | Our AAISM exam page covers it. AAISM needs an active CISM or CISSP, per ISACA |
The fastest way to see what ISC2 already tests is to browse our ISC2 exam collection and its practice tests, such as the CISSP practice test. For more on how the CISSP compares with other credentials, see our CISSP vs CEH guide.
A note on the alternatives
ISACA’s AAISM and IAPP’s AIGP are the two AI-related credentials most often mentioned alongside this one. We cover details for those in separate guides, and the figures differ by source, so we do not restate fees here. The point for this guide is narrower: they exist today, and the ISC2 credential does not.
How to Get Involved Now
ISC2’s volunteer program is the one action available today. ISC2 says contributors can join Job Task Analysis surveys, item development workshops, exam development and the pilot exam itself. Both members and non-members are welcome, and non-holders are specifically sought. Participants earn CPE credits.
| Volunteer route | What you do | Reward |
| Job Task Analysis survey | Rate which tasks and skills matter in AI security work | CPE credits, per ISC2 |
| Item development workshop | Help write exam questions | CPE credits, per ISC2 |
| Exam development | Review and refine exam content | CPE credits, per ISC2 |
| Pilot exam | Take the pilot | Possible path to certification if the exam goes operational. ISC2 has not published terms |
The volunteer form is on ISC2’s page for the certification. Whether participation improves your odds of getting the credential is not stated, and we would not assume it does.
Six Questions to Ask Before You Commit Time or Money
Use this checklist whenever a new credential is announced, not only this one.
- Does an exam exist, or only an announcement? Here, only an announcement.
- Are the domains published? Not yet. Without them, no study material can be accurate.
- Is the price known? Not yet. Only an expected maintenance fee is mentioned.
- Are the prerequisites known? Not yet. Experience rules are still being set.
- Is there an official course? Not for the pilot. Official courses follow later.
- What does renewal cost? Undetermined, apart from the expected annual fee.
A credential that fails all six is worth following, not buying. When ISC2 publishes the pilot exam outline, that is the signal to start studying in earnest.
Common Mistakes
- Searching for dumps of an exam that does not exist. No exam is available, so any material claiming to be real exam questions for it cannot be genuine. Wait for the pilot outline.
- Confusing the certificate with the certification. The certificate is on-demand courses available now. The certification is a future exam.
- Assuming prerequisites. ISC2 has not set them, and has not said whether existing certifications count.
- Treating the US$135 as the exam price. It is an expected annual maintenance fee, not an exam fee.
- Planning around one date. The sources point to late 2026 or early 2027 for the pilot, and 2027 for the operational exam.
- Skipping your current exam because a new one is coming. ISC2 says AI content already appears across its existing exam domains, so current credentials are not wasted.
- Assuming pilot success equals a credential. ISC2’s FAQ says passing could lead to certification if the pilot succeeds and the exam becomes operational. That is conditional.
What We Don’t Know Yet
- The official name. ISC2 says it has not been determined.
- The exam domains and weights. Not finalized.
- The exact pilot date and registration terms. Late 2026 is the stated window. Axios reported early 2027 for beta testing.
- The exam price. Not published.
- The experience requirements. To be set during development.
- Whether existing certifications count toward experience. Not decided.
- The number of questions, the duration and the passing score. Not published.
- CPE requirements for renewal. Undetermined.
- How pilot results convert to credentials. Not published.
- The exact posting date of ISC2’s FAQ page. It shows September 25, 2026 without a label.
- Salary effects. The credential does not exist yet, and we found no source that isolates pay for holders of related credentials, so we left salary figures out.
We will update this guide when ISC2 publishes the pilot exam outline or registration terms. If you have seen an ISC2 page that answers any of these, tell us and we will check it.
FAQS
What is the ISC2 AI Security Certification?
It is a new vendor-neutral credential that ISC2 is developing to define and validate the skills needed to securely design, implement and manage AI systems. It is in development and has no exam you can book yet.
When will the ISC2 AI security exam be available?
ISC2 anticipates a pilot exam in late 2026 and expects the certification to become operational in 2027. Axios reported that beta testing could start in early 2027. Pilot registration, fees and scheduling are not yet published.
What will the certification be called?
ISC2 says the name has not been determined. “AI Security Certification” is the working title.
How much will it cost?
No exam price is published. ISC2 expects the annual maintenance fee to align with its portfolio at US$135.
What are the prerequisites?
They are not defined yet. ISC2 has not decided whether existing certifications can count toward experience waivers.
Is it the same as the ISC2 AI Security Certificate?
No. The certificate is a set of six on-demand courses, about 16 hours in total, announced July 31, 2025. The certification will be a formal credential with an exam, continuing education and renewal.
Can I volunteer to help build it?
Yes. ISC2 invites members and non-members worldwide to take part in job task analysis surveys, item development workshops, exam development and the pilot exam. Participants earn CPE credits.
Will there be an official course?
Not for the pilot. ISC2 says official courses will follow once the certification is operational.
Does ISC2 already test AI topics?
Yes. ISC2’s April 2, 2026 exam guidance says AI security concepts appear across more than 50 core exam domains in its portfolio.
Should I wait for it before taking the CISSP or CCSP?
There is no stated reason to wait. The new credential targets more specialized AI roles, and ISC2 says existing exams already include AI content. Choose based on your current role and confirm details on ISC2’s pages.
Can I buy practice questions for it?
No genuine practice questions can exist before ISC2 publishes the pilot exam outline. Be cautious of any product claiming otherwise.
What can I take now if I want an AI security credential this year?
Existing options include ISACA’s AAISM, which needs an active CISM or CISSP. Check ISACA’s page for current fees and format, and see our AAISM exam page for practice material.
