ISC2 has highlighted four new professional development courses covering AI governance, sensitive data, compliance and enterprise risk. In an October 19 announcement, the organization outlined short, on-demand courses that each offer three continuing professional education (CPE) credits upon successful completion.
The courses address practical decisions facing cybersecurity teams as organizations adopt AI: which controls overlap, where sensitive information travels, and when automated risk recommendations need human review.
What the Four Courses Cover
- AI Governance Architecture examines how to combine requirements from NIST AI RMF, ISO/IEC 42001, the EU AI Act and right-to-explanation obligations. It also covers governing AI vendors throughout procurement and offboarding.
- AI-Driven Data Discovery and Sensitive Asset Inventory focuses on identifying information used by AI systems, selecting classification controls and assessing privacy risks when data crosses cloud regions.
- AI Policy Mapping and Optimization addresses combining AI framework requirements into organizational controls, identifying gaps in governance tools and setting privacy protections for large language models.
- Enterprise AI Risk Aggregation and Decision Support explores conflicting risk signals, the combined effect of multiple exposures and documenting decisions to override automated prioritization.
Who This Is For
ISC2’s course descriptions target practitioners working in governance, architecture, data protection and risk management. AI Governance Architecture is rated advanced; the other three courses are intermediate. These are focused development courses for existing practitioners, rather than an introductory cybersecurity curriculum.
The topics may also interest:
- Security engineers translating AI governance requirements into technical controls.
- Cloud security engineers responsible for protecting sensitive information across cloud environments.
Price, Access and Completion
Each course lists three hours of English-language, on-demand learning and three Group A CPE credits. ISC2’s announcement gives a regular price of US$120 per course, with US$96 pricing listed for eligible members or associates.
Learners have 60 days from purchase to finish. Governance Architecture, Data Discovery and Risk Aggregation require completing the learning experience, passing an assessment and submitting an evaluation. Policy Mapping’s published completion requirements list the learning experience and evaluation.
Successful learners receive a digital completion record and CPE credits. Review the individual course’s audience, learning outcomes and completion rules before choosing the topic that best matches your work.
