ISACA launches new AI governance certification to address security risks
Professional body ISACA expands its credential portfolio with a new certification focused on securing AI systems and managing governance challenges.
Key points
- ISACA introduces a new certification credential specifically for AI governance.
- The move responds to accelerating AI adoption and growing security concerns.
- The credential aims to help professionals manage artificial intelligence securely.
The professional association ISACA has expanded its certification portfolio to include a new credential focused on artificial intelligence governance. According to a report by Infosecurity Magazine, the organization is introducing this qualification to help security and technology professionals manage AI systems securely as adoption rates accelerate.
The new certification addresses the increasing complexity of integrating AI into enterprise environments. As organizations deploy AI tools at a faster pace, the associated governance challenges are growing in scope and severity. ISACA’s decision to add this credential signals a shift toward formalizing the skills required to oversee AI deployment, ensuring that security and compliance are not overlooked in the rush to adopt new technologies.
Context and Background
The expansion of ISACA’s offerings comes at a time when the cybersecurity industry is grappling with the unique risks posed by generative AI and machine learning models. Traditional security frameworks often struggle to keep pace with the rapid evolution of these technologies. By creating a dedicated governance-focused credential, ISACA aims to bridge the gap between technical AI implementation and strategic risk management.
Infosecurity Magazine notes that the primary driver for this initiative is the need for structured oversight. As AI becomes embedded in critical business processes, the potential for misuse, data leakage, and biased outcomes increases. The new certification is designed to equip professionals with the knowledge necessary to establish robust governance frameworks that mitigate these risks.
Who Is Affected
This development primarily impacts security professionals, IT auditors, and governance specialists who are responsible for overseeing AI initiatives within their organizations. Companies that are currently deploying or planning to deploy AI solutions will need staff capable of managing the associated compliance and security requirements.
Professionals seeking to validate their expertise in AI governance will now have a recognized credential to demonstrate their competency. This is particularly relevant for roles that sit at the intersection of technology, risk, and compliance, where understanding both the technical mechanics of AI and the regulatory landscape is essential.
What should you do?
Organizations should assess their current AI governance structures to identify gaps in oversight and security controls. Security teams should evaluate whether their staff possesses the necessary skills to manage AI-specific risks or if additional training or certification is required.
Background: Generative AI
Generative AI creates content from prompts. Agentic AI performs actions using tools. The former outputs text or code; the latter changes system states. Understanding this distinction is critical for security architecture, as agentic systems introduce execution risks that pure generation models do not possess.
Read the full guide: Generative AI vs Agentic AI: Architectural Differences and Security Risks
What to do and how to stay safe: ISACA
- Review current AI deployment policies to ensure they include comprehensive governance and security controls.
- Identify staff members responsible for AI oversight and evaluate their training needs regarding AI-specific risks.
- Monitor industry updates from professional bodies like ISACA for new standards and best practices in AI security.
- Conduct regular audits of AI systems to detect potential biases, data leakage, or unauthorized usage.
Step-by-step guide: Prompt Injection Warning Signs: How to Spot AI Manipulation
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is the new certification from ISACA?
ISACA has introduced a new governance-focused credential designed to help professionals manage AI securely.
Why is ISACA launching this certification?
The certification addresses growing governance challenges and security risks as AI adoption accelerates.
Who should pursue this certification?
Security and technology professionals responsible for managing AI systems and governance within their organizations.
