🧭 Lesson Overview
If you have studied for or hold a security credential — Security+ or equivalent — you already know how to govern, assess risk, build a security program, and manage incidents. That knowledge is not wrong. It is incomplete.
The systems now entering enterprise environments do not behave like traditional software. They learn from data. They produce probabilistic outputs. They can be manipulated through their inputs in ways that have no parallel in SQL injection or buffer overflows. They drift in production even when nobody changes a line of code. They can take autonomous actions with real-world consequences. And the regulatory landscape around them is entirely new.
Today we establish the conceptual bridge: what Security+ covers, what it stops short of, and exactly where AI cybersecurity must extend it. By the end of this lesson you will be able to explain — to an executive, a regulator, or a skeptical peer — why traditional infosec principles alone are insufficient for AI-enabled enterprises, and what AAISM adds on top.
An airline pilot earns an Airline Transport Pilot License (ATPL) — the top-level certification that proves they can fly. But every new aircraft type requires a separate "type rating" because each aircraft has its own avionics, its own failure modes, its own emergency procedures. The pilot does not unlearn how to fly; they extend their qualifications to a new platform.
Security+ is the ATPL. AAISM is the type rating for AI. The foundational skills — governance, risk management, program development, incident response — transfer completely. What changes is the aircraft.
Day 1 Learning Objectives
By the end of this lesson you will be able to:
- Explain why traditional cybersecurity certifications alone are insufficient for AI-enabled enterprises and where AAISM extends them.
- List the six implicit assumptions in traditional security that AI breaks.
- Name the three AAISM domains and their percentage weights on the AAISM exam.
- Describe the course map — AI as target vs. AI as weapon — and the four major frameworks covered.
- Articulate at least three ways AI systems change the information security threat model.
🏛️ Module 1 · Why Security+ Alone Isn't Enough
The Security+ body of knowledge covers a broad set of foundational cybersecurity domains: threats and vulnerabilities, cryptography, identity and access management, architecture, implementation, and incident response. These domains remain correct. They are also incomplete when the assets being governed include systems that learn from data, generate novel outputs, and can be manipulated through their inputs in ways that have no parallel in traditional software.
The Security+ Foundation — and Its Boundaries
- Threats & Vulnerabilities — identify, classify, and respond to threat actors and attack types
- Cryptography & PKI — encryption, hashing, certificates, key management
- Identity & Access Management — authentication, authorization, directory services
- Architecture & Implementation — network security, cloud, endpoint, and application hardening
- Incident Response & Governance — IR lifecycle, risk management, compliance frameworks
- D1 AI Governance & Program Management (31%) — AI-specific policy, data and model lifecycle, AI incident response
- D2 AI Risk Management (31%) — AI-specific threats, vulnerabilities, vendor and supply chain
- D3 AI Technologies & Controls (38%) — security architecture, lifecycle controls, monitoring, ethics & trust
The Three ISACA AI Credentials — Knowing Which One Fits
AAISM is one of three new ISACA "Advanced in AI" credentials, each aimed at a different professional role. Understanding the distinctions helps security professionals make the right next-credential decision.
| Credential | Audience | Prerequisite | Focus |
|---|---|---|---|
| AAISM — Advanced in AI Security Management | Security managers, CISOs, security architects | CISM or CISSP Pathway: Security+ → this course → CISM/CISSP → AAISM |
Governing and securing enterprise AI |
| AAIA — Advanced in AI Audit | Auditors, assurance professionals | CISA or equivalent | Auditing AI systems and controls |
| AAIR — Advanced in AI Risk | Risk and compliance professionals | CRISC or equivalent | Enterprise AI risk management |
For a security professional, the learning pathway runs: Security+ establishes the foundational vocabulary → advanced certifications deepen governance expertise → AAISM adds the AI-specific layer on top. Think of Security+ as the operating system; this course extends it toward the AI security skills that the field now demands.
⚡ Module 2 · Six Things That Are Genuinely New in AI
Security professionals often assume they can extend existing mental models to cover AI. In many cases they can — but in six specific dimensions, AI systems behave in ways that require genuinely new thinking. Click each card to flip it and see the security implication.
🗺️ Module 3 · Course Map — AI as Target & AI as Weapon
AI-103 approaches AI cybersecurity from two angles that together cover the full scope of what a security professional must understand: AI as a target (how adversaries attack AI systems you build or deploy) and AI as a weapon (how adversaries weaponize AI to attack your organization). Both are real, both are growing, and the controls for each are partially — but not completely — overlapping.
✏️ Activity A · Objective Mapping Exercise
For each course learning objective below, use the dropdown to select which traditional Security+ domain it maps to most closely, then decide whether it represents something Security+ already covers fully, partially covers, or doesn't cover at all. This exercise surfaces exactly where the AI extension is needed.
| Course Learning Objective | Closest Security+ Domain | Security+ Coverage |
|---|
🤖 Module 4 · AAISM Domains — The AI Security Extension
AAISM organizes AI security management into three domains. Understanding these domains serves two purposes: it maps to the AAISM exam content outline, and — more importantly for this course — it provides a conceptual architecture for everything we will build over the next 15 days.
Domain 1 — AI Governance & Program Management (31%)
This domain covers everything required to establish, operate, and maintain a formal AI security program within an enterprise. It extends beyond Security+'s governance and compliance fundamentals to add AI-specific requirements: AI steering committees, AI use case registers, and AI incident response annexes that Security+ does not address.
| AAISM D1 Topic | What It Covers | Security+ Parallel / AI Gap |
|---|---|---|
| AI Steering Committee & Charter | Cross-functional governance body with defined authority, cadence, escalation paths for AI-specific decisions | Security+ covers basic governance concepts — AI steering committee is a new structure not found in Security+ |
| AI Acceptable Use Policy | Data classification rules for AI inputs, prohibited use cases, approval pathways, shadow AI handling | Security+ covers policies and procedures at a conceptual level — AI AUP requires entirely new clauses Security+ never anticipated |
| AI Use Case Register | Inventory of all approved AI deployments with owner, risk tier, review date — the "asset inventory" for AI | Security+ covers asset management fundamentals — AI requires a new register format tied to behavioral risk, not just presence |
| Data & Model Lifecycle Governance | Provenance, lineage, AIBOM, model cards — governance of the full lifecycle from training to retirement | Security+ covers data classification at a foundational level — lifecycle governance of training data is new and requires AI-specific controls |
| AI Incident Response Annex | Extension of NIST SP 800-61 IR lifecycle to cover AI-specific incidents: hallucinations, prompt injection, model poisoning | Security+ covers the IR lifecycle — but AI incidents have novel detection, analysis, and remediation steps beyond standard playbooks |
Domain 2 — AI Risk Management (31%)
This domain covers the identification, assessment, and treatment of AI-specific risks. Security+ introduces risk management concepts — but AI introduces risk categories that do not map cleanly onto CIA-triad thinking familiar from Security+.
| AI Risk Category | Definition | Traditional Analogue? |
|---|---|---|
| Model Risk | The model itself behaves incorrectly — hallucinates, drifts, fails on edge cases, performs worse on subpopulations | Partial — software defects are analogous, but non-determinism makes model risk fundamentally different |
| Data Risk | Training, fine-tuning, or query data creates problems — poisoned, biased, leaking, copyrighted, or regulated | Partial — data security exists, but data-as-control-plane is new |
| Adversarial Risk | Deliberate attacks targeting the AI system — prompt injection, evasion, extraction, inversion, poisoning | Partial — adversarial attacks exist in traditional security, but the mechanisms are entirely different |
| Third-Party / Supply Chain Risk | Dependencies on models, data, or services you don't control; inherited vulnerabilities from the AI supply chain | Partial — supply chain risk exists, but the AI supply chain has unique opacity and layering |
| Ethical & Societal Risk | System causes harm even when functioning as designed — discrimination, displacement, deception | Minimal — traditional infosec rarely addresses designed-in harm; AI governance requires it |
| Regulatory & Legal Risk | Deployment violates binding rule — EU AI Act, sector regulation, IP law, consumer protection | Partial — regulatory risk is known; AI-specific regulation is new and rapidly evolving |
Domain 3 — AI Technologies & Controls (38%)
The largest AAISM domain covers the technical architecture and operational controls required to secure AI systems. This is where threat landscape knowledge (OWASP, ATLAS), architecture design (defense in depth for AI), and operational monitoring intersect. Day 11 builds the architecture; Days 7–9 build the threat model. For today, we establish the vocabulary.
Domain 3 carries the largest exam weight because technical controls are where AI security fails most visibly — and because the skills do not transfer cleanly from traditional security. A Security+-certified professional who can design a firewall ruleset does not automatically know how to design a prompt injection defense, an AI model isolation architecture, or an MLOps monitoring pipeline. These are genuinely new skills.
🔬 Activity B · Think-Pair-Share: Where Does the Gap Live?
Moraine Valley Community College is deploying three AI systems this semester:
- AI tutoring chatbot for developmental math students — trained on MVCC course materials, deployed on the student portal.
- AI-assisted grading tool — helps faculty evaluate written assignments, surfaces suggested scores and feedback.
- Predictive analytics dashboard — flags at-risk students for advising intervention based on attendance, LMS engagement, and grade data.
- Think (5 min): For each system, identify one traditional cybersecurity control that applies and one challenge that is genuinely new (not covered by traditional infosec). Write your answers individually.
- Pair (10 min): Compare with a partner. Where did you agree? Where did you reach different conclusions?
- Share (10 min): Class share-out. Instructor captures on whiteboard: traditional controls column vs. new AI challenges column.
- Debrief (5 min): Which of the six "genuinely new" assumptions from Module 2 appear most in your analysis?
Instructor note: The predictive analytics dashboard is designed to surface the ethical/societal risk dimension — at-risk student flagging has real equity implications that traditional CIA triad thinking doesn't capture.
📝 Assessment Artifact
One-Page Reflection: "Three Ways AI Breaks Traditional InfoSec Assumptions"
Write a focused one-page (400–500 word) reflection addressed to a hypothetical CISO colleague who holds a Security+ and is skeptical that AI requires new governance structures: "We've secured systems before. Why is AI fundamentally different?"
Your reflection must address:
- Three specific ways AI systems break implicit assumptions in traditional information security — choose from the six covered in Module 2, but go deeper than the card text. Use a concrete example for each.
- One AAISM domain that you believe addresses the most critical gap — and why you chose it over the other two.
- One analogy of your own (not the pilot/type rating analogy from the lesson) that explains the Security+→AAISM credential pathway to a non-technical stakeholder.
Format: Plain prose, no bullet lists (write it as a professional memo, not lecture notes). You will use this reflection as a reference point on Day 15 when you build your capstone AI Security Program.
Grading: Daily assignment category (25% of course grade). Evaluated on specificity of AI security gap identification, accuracy of AAISM domain characterization, and quality of original analogy.
❓ Day 1 Knowledge Check
Test your mastery of Day 1 content. Each question provides immediate feedback with an explanation. This is formative — it does not affect your grade, but it predicts how well you will do on the Week 1 quiz.