ISC2's AI Security Certification vs. Security+ SY0-801: Which One Fits Your Next Move?

New to cybersecurity? Security+ is the more appropriate starting point. ISC2's proposed AI security certification targets experienced professionals securing AI systems, not beginners looking to skip foundational training. The credentials serve different purposes, and Security+ is not a prerequisite for ISC2's proposed certification.

On October 26, 2026, ISC2 (the organization behind CISSP) released the pilot exam outline for a new AI security certification. CompTIA's Security+ V8 (SY0-801), which includes an objective on AI-related security risks, is expected to launch on or around November 17, 2026. The useful distinction is foundation versus specialization, not rival certifications.

What ISC2's AI security certification covers

ISC2 says the proposed credential is for experienced professionals responsible for securing the design, deployment and maintenance of AI and machine learning systems across the AI lifecycle. Its pilot exam outline splits the exam into six domains:

• Artificial Intelligence (AI) Concepts and Security Fundamentals: 10%
• AI Governance, Ethics, Risk and Compliance: 17%
• AI Data Management, Privacy and Model Security: 19%
• Secure AI Architecture, Engineering and Identity and Access Management (IAM): 18%
• Secure AI Operations and Incident Response (IR): 19%
• AI Threats, Testing and Lifecycle Management: 17%

The five domains outside AI Concepts and Security Fundamentals account for 90% of the exam weight. The outline goes beyond identifying threats: it includes controls for protecting training data, preventing model extraction, and securing AI deployment pipelines.

ISC2 AI security certification requirements

ISC2's proposed eligibility requirements are:

• Total experience: a minimum of four years of cumulative, paid, full-time experience in cybersecurity or AI-related fields.
• Cybersecurity experience: two years must be in cybersecurity.
• Domain experience: one year must be in two or more of the exam's domains. The cybersecurity and domain requirements are within the four-year total, not additional years.
• Credential substitution: an active CISSP, ISSAP, ISSEP, ISSMP, CCSP or CSSLP may substitute for the entire experience requirement.
• Degree waiver: a bachelor's or master's degree in computer science, IT, STEM or a related field may satisfy up to one year of required experience. The degree waiver is capped at one year.
• Other qualifying experience: part-time work and internships may also count.

Candidates do not have to hold an ISC2 certification.

Timeline: according to ISC2's pilot announcement, pilot-exam volunteer interest closes November 4, 2026. Approximately 3,000 qualified volunteers will be selected to take the 160-item, three-hour, multiple-choice pilot from mid-December 2026 through late January 2027. If the pilot succeeds, ISC2 plans to launch the certification in 2027. ISC2 currently refers to it as its AI security certification.

Passing the pilot alone does not earn the credential. Candidates must also meet the experience requirements and complete the endorsement process.

What Security+ SY0-801 covers

Security+ V8 is still a broad, foundational security exam: up to 90 questions in 90 minutes, a mix of multiple-choice and performance-based questions, with a passing score of 750 (on a 100 to 900 scale). CompTIA recommends, but does not require, about two years of hands-on experience as a security administrator.

AI shows up as one objective inside the Threats, Vulnerabilities and Attacks domain: explaining the security risks of AI systems, models, prompts, privacy and data exposure. It also appears in Security Operations, where automation and "AI-assisted workflows" are part of the objective on orchestration.

That's the key difference: Security+ treats AI risk as one part of a broad security foundation. ISC2's proposed certification goes deeper into securing, governing, operating and testing AI systems.

Which one should you pursue?

Start with Security+ if you're breaking into cybersecurity, moving from help desk or networking into security, or need a baseline credential for a role. Many topics in ISC2's AI outline build on security fundamentals such as access control, incident response, risk, governance and architecture. Security+ is one way to build and validate that foundation, not a prerequisite for ISC2's proposed credential.

Watch the ISC2 pilot if you meet the proposed experience requirements, including any applicable degree waiver or credential substitution, and you're spending real time on AI systems at work. Pilot spots are limited to about 3,000 qualified volunteers, so meeting the proposed certification requirements does not guarantee a seat.

Have the fundamentals but don't yet meet ISC2's requirements? Build AI-specific experience. Not qualifying for this pilot does not automatically mean you need Security+.

Already passed Security+? If your certification is current, the arrival of V8 does not require you to retake it. Keep up with your renewal requirements and build hands-on experience, including AI-specific work if that is your goal. Security+ certifications earned today are valid for three years and must be renewed to remain active. Passing the latest exam version is one renewal option, not the only one.

Timing tip: SY0-701 or SY0-801?

Already studying for SY0-701? You don't need to switch just because V8 launches. CompTIA lists June 11, 2027 as the English SY0-701 retirement date. Japanese, Portuguese, Spanish and Thai versions retire August 13, 2027. If you can finish your preparation and test before your exam language retires, staying with your current version is a reasonable choice.

SY0-801 is expected to launch on or around November 17, 2026, initially in English. That launch does not immediately retire SY0-701. Starting fresh? Choose the version that fits your test date and available study materials. Study for the version you'll actually sit, and recheck CompTIA's dates before booking.

Preparing to take SY0-701 before it retires? Start with our Security+ SY0-701 training.

Sources are linked alongside the relevant claims above.

Information checked as of November 2, 2026. ISC2 eligibility remains proposed, its 2027 launch depends on a successful pilot, and CompTIA's expected V8 launch date may change.