1. Basic AI Concepts Related to Cybersecurity — ~17%

• This foundational section introduces core AI technologies and how they apply to security:

✔ AI types & techniques — generative AI, machine learning (ML), statistical learning, deep learning, NLP, LLMs/SLMs, transformers, GANs.
✔ AI model training concepts — supervised, unsupervised, reinforcement learning, model validation, fine-tuning, pruning, quantization.
✔ Data security for AI — data cleansing, verification, lineage, integrity, provenance, augmentation, watermarking, retrieval-augmented generation (RAG).
✔ Prompt engineering basics and prompt techniques.

2. Securing AI Systems — ~40%

• The largest domain focuses on protecting AI systems, data, models, and infrastructure:

✔ Implementing security controls to safeguard models, pipelines, and assets.
✔ Securing AI deployment environments — cloud, hybrid, and on-premises.
✔ Mitigating adversarial risks and attacks — prompt injections, data/model poisoning, inference attacks, model theft, supply chain issues.
✔ Access controls, monitoring, auditing, and secure architecture design.

3. AI-Assisted Security — ~24%

• This domain covers leveraging AI tools to improve cybersecurity operations:

✔ Using AI-driven tools for threat detection and behavioral analysis.
✔ Automating security workflows like alert correlation, event triage, and incident response.
✔ Enhancing SOC operations with AI insight and analytics.
✔ Understanding benefits and limitations of AI in daily security tasks.

4. AI Governance, Risk & Compliance (GRC) — ~19%

• This section focuses on responsible, ethical, and compliant use of AI in organizations:

✔ Understanding global governance and regulatory frameworks related to AI (e.g., GDPR, NIST AI RMF, EU AI Act).
✔ Integrating governance, risk management, and compliance principles into AI programs.
✔ Ensuring ethical AI use — fairness, privacy, transparency, accountability.
✔ Risk assessment strategies and corporate AI policy considerations.

Who This Is For

• CompTIA recommends this certification for professionals with:

• 🔹 About 3–4 years of IT experience, including at least 2 years of hands-on cybersecurity experience.
  🔹 Prior certifications like Security+, CySA+, PenTest+, or equivalent knowledge are helpful.