SecurityNot yet confirmed elsewhere1 publisher2 min readPublished Updated
ISACA opens beta applications for an AI governance certification due in early 2027
ISACA is taking beta applications for an AI governance certification it plans to launch in early 2027. The gap it is selling into comes from ISACA's own polling, where only 32% of digital trust professionals say their employers handle AI risk adequately.
The Watch · Security desk

Two values for the share of organisations onboarding or implementing AI solutions: 46% in 2024, rising to 54% in ISACA's State of Cybersecurity 2026 report.
| Measure | Value | As of | Claim |
|---|---|---|---|
| 2024 | 46% of orgs | 4 | |
| State of Cybersecurity 2026 | 54% of orgs | 4 |
What happened
- The governance exam completes a series of ISACA AI credentials that includes Advanced in AI Audit, Advanced in AI Security Management and Advanced in AI Risk.
- Organisations onboarding or implementing AI rose to 54% from 46% in 2024, according to ISACA's State of Cybersecurity 2026 report.
- Chris Dimitriadis, ISACA's chief global strategy officer, said uptake of its AI training has been positive, especially in Europe, the US and Asia.
Why it matters
- exposure Security teams run the AI systems going live now under the controls they already have; nobody can hold ISACA's governance credential until after the early 2027 launch.
- decision Until then, a manager hiring for AI oversight who wants an ISACA badge can only ask for the audit, security management or risk credentials.
- cost ISACA's call for separate specialised AI training for auditors, cyber staff, risk, project and IT managers means organisations starting with no AI training pay per role.
Every figure in the case for this credential comes from ISACA, the training and certification body that will run the exam [1]. Infosecurity Magazine attributed the adequacy number to previous ISACA research [3]. The training and skills figures come from ISACA's 2025 AI Pulse Poll and its State of Cybersecurity 2026 report [5][10].
The two 32% figures measure different things. One counts digital trust professionals who believe their organisations adequately address AI risks such as privacy, bias and security [3]. The other 68% did not say so [12]. In the 2025 AI Pulse Poll, which surveyed more than 3,000 digital trust professionals, 32% said no employee at their organisation receives any AI training [5].
"The governance certification is important in terms of providing an umbrella around the operations of professions from cyber to audit to risk," Chris Dimitriadis said at a media roundtable at ISACA's Europe conference in Munich on 8 October [6][7]. He also set a bar for the training itself. "We need this to be holistic and well rounded with soft skills in order for them to be successful in their job," he said [8].
ISACA's 2026 research expects AI to take over most technical and orchestration tasks. People would keep the work that needs context, intuition and communication: governance, AI configuration and monitoring, and final decisions [9]. The same body's security survey ranks a different set of skills first. Threat detection and response, alongside identity and access management, was the most important security skill cited in the State of Cybersecurity report, with vulnerability management, data security and incident response also highlighted [10].
What to watch
- ISACA's publication of the governance exam's domains, price and eligibility rules before the early 2027 launch.
- An independent survey of AI risk controls that confirms or contradicts ISACA's 32% adequacy figure.
- The next AI Pulse Poll, and whether the 32% of respondents reporting no AI training for any employee falls.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence40
- Adoption
- Insufficient
- Hype gap+20
- Incentives80
- Confidence45
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
Training and certification body ISACA plans to launch an AI governance certification in early 2027; it is currently accepting applications in a beta phase.
- [2]
The AI governance certification will complete a series of ISACA AI-focused credentials; the rollout includes Advanced in AI Audit (AAIA), Advanced in AI Security Management (AAISM) and Advanced in AI Risk (AAIR).
- [3]
Previous ISACA research found only 32% of digital trust professionals believe their organizations adequately address AI risks such as privacy, bias and security, despite widespread workplace adoption.
- [4]
54% of organizations are involved in onboarding or implementing AI solutions, up from 46% in 2024, according to ISACA's State of Cybersecurity 2026 report.
- [5]
ISACA's 2025 AI Pulse Poll, which surveyed over 3000 digital trust professionals, found that 32% said there is no AI training provided to any employees in their organization.
- [6]
The governance certification is important in terms of providing an umbrella around the operations of professions from cyber to audit to risk.
- [7]
Chris Dimitriadis, chief global strategy officer at ISACA, spoke during a media roundtable at ISACA's Europe conference in Munich, Germany on 8 October.
- [8]
We need this to be holistic and well rounded with soft skills in order for them to be successful in their job.
- [9]
From its 2026 research, ISACA concluded AI is set to dominate most technical and orchestration tasks; professionals will focus on tasks requiring context, intuition and communication, including governance, AI configuration and monitoring, and final decision making.
- [10]
Threat detection and response alongside identity and access management was the most important security skill needed, cited in ISACA's State of Cybersecurity report; vulnerability management, data security and incident response skills were also highlighted.
- [11]
we need more AI training, specialized AI training across the domain, whether you're an auditor, if you're a cyber professional, a risk manager, project manager or IT manager dealing with governance of AI technology, we need more AI training.
- [12]
68% of surveyed digital trust professionals did not say their organizations adequately address AI risks.
- [13]
Dimitriadis said uptake of the ISACA-provided AI trainings had been positive, especially in AI-forward regions like Europe, the US and Asia.
Sources
1 independent publisher whose own reporting we read for this story.
- infosecurity-magazine.comAI Training Critical as Governance Challenges Grow
1 article · October 9, 2026
Topics and entities
Follow any of these and your For You feed starts watching them — no settings page required.
Topics
- Professional certificationFollow
- Cybersecurity skills gapFollow
- AI GovernanceFollow