ISC2's AI Security Certification Is Coming in 2027. Here's How to Get Ready Now

ISC2 is building its first full AI security certification, and the pilot exam starts in mid-December. If you secure networks, clouds or SOCs for a living, this is the first credential aimed squarely at the systems your company is rushing into production, and the people who prepare early will be the ones who hold it first.

On October 26, ISC2 published the pilot exam outline for a credential it is still calling simply the "AI Security Certification." The name isn't final. The structure mostly is. On November 6 it moved into standard setting, the step where subject-matter experts help decide what a passing score should be. ISC2 says the operational exam is expected in 2027, and Infosecurity Magazine reports that could be as early as the first quarter.

I've been teaching security certifications long enough to see how this goes. A new credential lands, and for a while the people holding it stand out. Then it becomes a checkbox. You want to be in that first group, and the time to start is now.

What the pilot exam looks like

The pilot is a linear exam. You can't skip a question and come back to it, which is a pacing problem in its own right. It runs in English only, in person at Pearson Professional Centers, and it's free for the roughly 3,000 volunteers ISC2 selects. Pilot results take 8 to 12 weeks after the testing window closes and come back as pass/fail only. You won't get a domain breakdown.

The six domains, and what they tell you

Look at that list again. Only one domain is about AI itself. The other five are the security work you already know: governance, data protection, architecture, IAM, operations, incident response and testing, applied to a new kind of system. That's my main takeaway, and it's good news. This isn't a data science exam. It's a security exam that assumes you can already think like a defender.

Where things stand

• Oct 26, 2026Pilot exam outline released
  Six domains and the eligibility rules published.
• Nov 4, 2026Volunteer form closed
  About 3,000 candidates will be chosen for the pilot.
• Mid-Nov 2026Pilot registration opens
  Only for candidates ISC2 selected.
• Mid-Dec 2026Pilot exams begin
  Appointments run until about January 24, 2027.
• 2027Operational launch expected
  ISC2 will announce the final name and pricing after the pilot.

This is not an entry-level credential

To qualify, you need four years of cumulative, paid, full-time experience in cybersecurity or AI-related fields. At least two of those years have to be in cybersecurity, and at least one has to cover two or more of the exam domains. A relevant degree can count for up to one year.

ISC2 also says this certification will require continuing education and renewal, the same as its other certifications. That's different from its AI learning certificates, which show you finished a course one time. Annual maintenance fees haven't been set, but ISC2 expects them to be in line with the $135 it charges across its other certifications.

What to do depending on where you are

My take

ISC2 got this right in one important way. It built the exam around security practitioners, not AI researchers, and it set the experience bar high enough that the credential will mean something. My only real criticism is how slow it is. Companies are putting AI agents in front of customers this quarter, and the certification arrives next year. Don't wait for the name or the price. The skills on that blueprint are the ones security teams need right now.

• Five of the six domains are core security work. If you study for CISSP or Security+, you're already studying for this.
• Holding a CISSP is the fastest way to become eligible.
• Start documenting your AI-related project work now. Experience you can't prove doesn't count.

— Scott