Certifications that added AI
Traditional security certifications added AI topics. AISP was built around AI, bringing the threat view and the governance view together in a single credential.
Launch
The AI security certification the market is going to ask for.
AISP: AI Security Professional
The EXIN AI Security Professional (AISP) certification validates the ability to identify, test and govern AI-specific security risks. It is built on the OWASP AI Exchange, the open standard that already guides ISO standards and the security of the EU AI Act.
Cyber Cultura’s prep course arrives in Portuguese, from fundamentals to practice.
- Body of knowledge
- OWASP AI Exchange
- Experts building the standard
- 165+
- Pages incorporated into the EU AI Act
- 40+
- Standards alignment
- ISO/IEC 27090 and 42001
AI is already in production. Security is still getting ready.
Hiring doesn’t close the gap
There are few AI security specialists on the market. The way forward is to build the capability in the professionals the company already has, and be able to prove it.
Regulation already requires it
The EU AI Act, DORA and NIS2 bring AI-specific security obligations to regulated sectors.
Built on the OWASP AI Exchange
The OWASP AI Exchange is an open, vendor-neutral body of knowledge on AI security, maintained by a global community of more than 165 security professionals, AI engineers and governance experts, with more than 200 pages of practical guidance.
The official course material was designed by Rob van der Veer, founder of the OWASP AI Exchange, lead author of ISO/IEC 5338 and co-editor of the security standard for the EU AI Act. The core exam literature is freely available.
Six domains, one credential
Each domain maps to real content in the OWASP AI Exchange: what you study for the exam is what you’ll look up on the job.
Organizing AI security in the company
- Apply the GUARD framework to structure AI security.
- Distinguish AI security risk from conventional cyber risk.
- Map AI assets, such as training data, models, inputs and outputs, and their threats.
Threat modeling and agentic AI risks
- Carry out risk management steps specific to AI threat modeling.
- Identify the security risks of agentic AI systems.
- Apply structured cycles of risk treatment and monitoring.
Input, development and runtime threats
- Classify evasion attacks by the attacker’s level of knowledge.
- Distinguish direct and indirect prompt injection and apply the 7-layer defense.
- Identify data poisoning, model exfiltration and sensitive data leakage.
AI security controls
- Apply governance controls across AI, security and compliance programs.
- Limit exposure of sensitive data to reduce the attack surface.
- Constrain model behavior with oversight, least privilege and explainability.
AI security testing
- Distinguish AI red teaming from conventional security testing.
- Identify what to test in predictive AI and in generative AI.
- Run a systematic red teaming process, from scoping to validating the fixes.
Privacy, compliance and regulation
- Apply AI-specific privacy principles to real scenarios.
- Relate ISO/IEC 23894, 27005, 42001 and 5338 to compliance requirements.
- Navigate the EU AI Act, the GDPR and copyright risks in AI.
The exam
The exam is scenario-based: each question presents a real system and threat and asks for the right decision. Remembering definitions isn’t enough; you have to apply your knowledge with judgment.
- 40
- Questions
- 90
- Minutes
- 65%
- Passing score
- Advanced
- Level
- Portuguese
- Exam language
EXIN has no formal prerequisite, but recommends experience in security or in AI: either one is enough.
Who it’s for
Security
Analysts, architects, GRC specialists, pentesters and security leaders who are now responsible for AI systems.
AI and ML
Engineers and data scientists who build or deploy AI and need to understand the security implications.
Risk, audit and compliance
DPOs, compliance officers and auditors responsible for AI governance and regulatory readiness.
Technology leadership
Architects, technical leads and decision-makers who evaluate, approve and govern AI deployments.
Toward the AI Security Specialist title
AISP is the final step of the EXIN AI Security Specialist track, which combines three individual certifications.
ISFSInformation Security Foundation
AIFBCS Artificial Intelligence Foundation
AISPAI Security Professional
AISSAI Security Specialist
Launch
Cyber Cultura prep course
- In Portuguese
- Online
- Material based on the OWASP AI Exchange
- Launching November 3, 2026
Prep course
R$298.00
15% off the AISP exam voucher
Offer valid until November 30, 2026
I want to enroll(opens in a new tab)Payment and access through Hotmart.
Launch
AISP: AI Security Professional
Cyber Cultura’s prep course arrives in Portuguese, from fundamentals to practice.
cyber@cyberconsulting.com.brCertification information published by EXIN.Official AISP page at EXIN(opens in a new tab)