An AI security certification is a credential that tests whether a person can secure AI systems, use AI in security work, or govern both. In 2026 the choice finally has real options, from CompTIA SecAI+ and ISACA AAISM to three GIAC exams, IAPP AIGP and an ISC2 exam still in its pilot. They are not interchangeable. Each one was built for a different job and measures it in a different way, and that is the part most ranked lists leave out.
Here is the scene we keep coming back to. A hiring manager has two shortlisted candidates for a new AI security role. One holds ISACA’s AAISM, the other passed CompTIA SecAI+, and the manager wants to know which badge means “can secure our LLM rollout”. The honest answer is that neither badge settles it on its own, but each one tells you something specific about what the person was tested on. By the end of this post you should be able to read both résumés and know which questions to ask in the interview.
How to choose an AI security certification
Start from the job, then look at how the exam measures it. We sort the field along two lines. The first is the role the credential was designed for, which runs from hands-on engineering through security management to governance and audit. The second is the testing method, because a multiple-choice exam proves recall and judgment while a lab exam proves that you can actually do the work at a keyboard.
Those two lines explain most of the market. GIAC’s AI exams run on its CyberLive format, which replaces traditional multiple choice with performance-based challenges in lab environments. ISACA’s AAISM and the IAPP’s AIGP are question-based exams that lean on governance and risk. CompTIA sits in between, with a mix of multiple-choice and performance-based questions. Our advice is to pick the credential whose testing method matches the work the person will do on Monday morning.
| Credential | Body | Built for | How it tests | Gate to sit it |
|---|---|---|---|---|
| SecAI+ (CY0-001) | CompTIA | Security practitioners securing and using AI | Up to 60 questions, multiple choice and performance-based | None; experience recommended |
| AAISM | ISACA | Security managers | 90-question exam | Active CISM or CISSP |
| GAIPS | GIAC | Engineers securing GenAI apps and LLM pipelines | 54 questions, CyberLive hands-on | None listed |
| GAIPT | GIAC | AI penetration testers | CyberLive hands-on | Course bundle until February 9, 2027 |
| AIGP | IAPP | AI governance professionals | 100-question exam in 2.75 hours | None listed |
| ISC2 AI security | ISC2 | Experienced security leads and architects | Pilot exam, 3 hours, multiple choice | Four years of experience, or a qualifying ISC2 credential |
The AI security certifications you can sit today
Four bodies offer exams you can book now, and each one leans toward a different job.
CompTIA SecAI+: the practitioner’s entry point
SecAI+ is the broadest door into the field. CompTIA launched it on February 17, 2026 as the first certification in its expansion series, with exam code CY0-001, a maximum of 60 questions and a passing score of 600 on a 100 to 900 scale. There is no hard prerequisite. CompTIA recommends three to four years in IT, two or more of them hands-on in security, and Security+, CySA+, PenTest+ or equivalent knowledge.
What makes it useful for our hiring manager is the weighting. Securing AI systems carries 40% of the exam, ahead of AI-assisted security at 24%, which means a SecAI+ holder was mostly tested on protecting models, data pipelines and inference layers rather than on AI theory.
One caution for anyone budgeting a team plan. CompTIA estimates the exam will retire about three years after launch, so the next version will move with the field.
ISACA AAISM: for managers who already hold CISM or CISSP
Where SecAI+ opens the door, AAISM is built for people already inside the room. ISACA requires an active CISM or CISSP before you can register, which makes it an add-on for experienced security managers rather than a starting credential. The exam costs US$459 for members and US$599 for non-members, plus a US$50 application fee, and candidates get six months from registration to sit it.
The content outline splits 90 questions across three domains. AI governance and program management and AI risk management take 31% each, and AI technologies and controls takes 38%. That last domain covers security architecture, the model life cycle and monitoring, which is more technical than the title suggests.
The task we would point a security leader to is number nine in the outline, which asks holders to embed, monitor and verify AI security requirements when the organization buys vendor AI-enabled solutions. ISACA also lists two sibling credentials, AAIA for AI audit and AAIR for AI risk, for people whose job sits on the assurance side.
GIAC AI certifications: hands-on lab exams
Back to our hiring manager. If the role is building or breaking AI applications, no multiple-choice score shows the candidate can do it, which is the gap GIAC aims at. GAIPS validates the ability to audit and secure generative AI applications and LLM development pipelines, pairs with the SANS course SEC545, and runs as a 54-question CyberLive exam with a 65% passing score. Its objectives cover agentic systems, inter-agent communication and supply chain weaknesses in the integration layer.
Two siblings round out the set. GAIPT, the AI penetration tester exam, covers direct and indirect prompt injection, RAG exploitation and MCP server attacks, and it can only be bought with its course (SEC536) until general sale opens on February 9, 2027. GASAE targets SOC analysts, detection engineers and threat hunters who use LLMs, RAG and agentic AI in detection and response. GIAC is also an accredited ISO/IEC 17024 personnel certification body through ANAB, which matters when a contract or public-sector buyer asks for accredited credentials.
If you are scoping the kind of testing GAIPT covers for your own systems, our post on how to scope and run AI red teaming walks through the engagement side.
AIGP vs AAISM: governance or security management
Buyers often mix these two up because both sit above the keyboard. The IAPP’s AIGP is about responsible AI governance, meaning how laws and frameworks apply to AI systems across the life cycle. It is a governance credential that touches security, not a security credential. AAISM is the reverse, a security management credential that touches governance.
The logistics differ too. The AIGP exam has 100 questions in 2.75 hours, costs US$649 for members and US$799 for non-members, and has no prerequisite credential. If the person will own AI policy, privacy impact and regulatory mapping, AIGP fits. If they will own the AI security program and its controls, AAISM fits, provided they already carry CISM or CISSP.
The ISC2 AI security certification is still in its pilot
Many readers are waiting for ISC2, so the timeline deserves a clear statement. ISC2’s page says it is developing a new AI security certification and will make it operational only if the pilot exam is successful. Its October 26, 2026 update counts more than 9,500 interested volunteers from over 150 countries and job task analysis workshops held in Alexandria, London and Singapore in August 2026. Remote item development workshops run through December 18. About 3,000 volunteers will be invited to sit the pilot. ISC2 has not published a general launch date.
The pilot outline is worth reading even if you never sit the exam. It names six domains, from AI concepts at 10% to secure AI operations and incident response at 19%, and it requires four years of experience or a CISSP, ISSAP, ISSEP, ISSMP, CCSP or CSSLP in place of that experience. For a team building its own AI security skills matrix, that outline is a free, well-sourced checklist.
Certificate or certification: why the word matters
The Cloud Security Alliance’s Trusted AI Safety Expert (TAISE), built with Northeastern University, shows why reading the label carefully pays off. CSA calls it a certificate, delivered as a 10-module course plus a final exam, and it is sold only as a training and exam bundle with no exam-only option. That is a legitimate way to learn the frameworks it covers (CSA’s AICM, NIST AI RMF, ISO and MITRE ATLAS). It measures a course plus its exam, though, which is a different claim from a standalone exam you can book without the training.
The same reading applies to the other direction. An AI security certification for a person is not a certification of your AI systems. If a supplier’s badge is the question, our guide to ISO 42001 certification and what the audit tests covers the organizational side.
Mitigation for hiring risk: what a credential proves
So which of the two candidates does our hiring manager call first? Both, with different questions. The AAISM holder has proved they can reason about AI risk, governance and controls at a management level, so ask them to walk through how they would assess a vendor’s AI feature before signing. The SecAI+ holder was tested mostly on securing AI systems, so ask them how they would stop an LLM application from acting on instructions hidden in a retrieved document. A GIAC CyberLive holder has already shown that work in a lab, so the interview can go straight to your architecture.
Our position is that a credential is a floor. It tells you the person studied a defined body of knowledge and passed a defined test, and a lab exam tells you more than a multiple-choice one does. It never tells you how they will handle your stack, which is why we pair any hire with a structured review of your actual AI systems. That is the work our AI governance and assurance practice does with security teams that are staffing up.
Frequently asked questions
Which AI security certification is best for beginners?
CompTIA SecAI+ has no hard prerequisite, so it is the most open of the security-focused options. CompTIA still recommends three to four years in IT, including two or more in hands-on security, and Security+ level knowledge.
Is there a free AI security certification?
None of the major credentials covered here is free to earn. Some preparation is free, though. ISACA offers a free 12-question AAISM practice quiz, and the ISC2 pilot exam outline is a public document that lays out six domains of AI security knowledge.
Does AAISM require CISSP?
AAISM requires an active CISM or an active CISSP, so either one qualifies. The exam has 90 questions across governance, risk and technical controls, and you have five years after passing to apply for the credential itself, which also requires a US$50 application fee.
When will the ISC2 AI security certification be available?
ISC2 has not announced a general launch date. Its October 26, 2026 update says item development workshops run through December 18, and that about 3,000 volunteers will be invited to a pilot exam. The credential becomes operational only if the pilot succeeds, and the pilot has not opened yet, so do not build this year’s hiring plan around it.
Bottom line
Match the AI security certification to the job and the testing method. Practitioners securing AI start with SecAI+, security managers with CISM or CISSP add AAISM, engineers and testers who need proof at a keyboard take GIAC’s lab exams, and governance leads take AIGP. Then interview for your own systems, because no badge has seen them yet.