New ISC2 AI Express Courses help cybersecurity professionals stay ahead. Artificial intelligence (AI) is changing the way cybersecurity professionals work and ISC2 training is evolving right alongside it. According to the latest ISC2 Research, human oversight is becoming even more essential in AI-enabled workplaces. Cybersecurity teams are spending more time reviewing AI-generated outputs, validating results and deciding when AI recommendations can be trusted. The research also points to a shift in entry-level roles, with more than half seeing AI as a source of new career opportunities and fresh pathways into the profession. That's why practical AI education matters now. As organizations move faster with AI, cybersecurity practitioners need to know how to use these tools well, understand where they fall short and make smart, informed decisions. ISC2's newest AI Express Courses are designed for that reality: short, on-demand learning experiences built for busy professionals who want cutting-edge knowledge they can actually use. Complete them anytime, anywhere, build skills through interactive scenarios and stay current without overcommitting your schedule. Each course is just $40 ($32 for ISC2 members) and members can earn 1 CPE credit per course. Organizations often struggle to align AI security frameworks, regulations and contractual obligations. In this scenario-based course, learners explore how governance decisions shape AI risk and learn practical methods for translating overlapping requirements into unified policies and controls. * Evaluate AI governance and compliance requirements across frameworks and regulations * Select framework adoption strategies based on organizational needs and risk * Align overlapping requirements into practical policies and controls * Apply governance principles to support secure, ethical AI adoption Shadow AI can introduce significant data, compliance and governance risks without organizations realizing it. Through a realistic case study, learners will understand how to identify AI-enabled systems, assess associated risks and determine appropriate governance and risk treatment actions. * Build AI asset inventories to improve visibility into AI-enabled systems * Classify and prioritize AI risk based on data sensitivity and business impact * Assess control effectiveness using established security frameworks * Recommend and communicate risk treatment actions to stakeholders Vibe coding and other AI-assisted development practices can introduce security risks that emerge through everyday work. In this scenario-based course, learners identify gaps in visibility, accountability and governance, then translate those risks into actionable security requirements and controls. * Convert AI-related risks into clear, testable security requirements * Identify where risk appears across the software development lifecycle * Evaluate trade-offs between speed, control and assurance * Establish governance and review practices for AI-assisted development AI tools can help analyze architectural options, but effective decisions still require human judgment. In this scenario-based course, learners evaluate architecture choices for AI-enabled systems while balancing security, governance, compliance and business objectives. * Evaluate data architecture decisions with security and compliance in mind * Integrate human oversight into AI-driven systems * Design audit and transparency mechanisms that support accountability * Apply governance and risk considerations to architectural decisions Whether you are just starting to explore AI or looking to sharpen your team's approach, ISC2 offers practical ways to keep learning. Along with AI Express Courses, professionals can build readiness through additional ISC2 Certificates and Courses, including express tabletop exercises that support your decision-making skills in a safe environment, strengthen response strategies and turn emerging AI challenges into real-world practice. Related insights.

Bring the Code of Professional Conduct to life with ISC2 cybersecurity Practice Guides. Ethical principles are the foundation of the cybersecurity profession - but applying them in fast-moving, real-world environments can be complex. ISC2 has just released Practice Guides: What the Code Looks Like in Action designed to bridge that gap, helping cybersecurity professionals translate the Code of Professional Conduct into clear, actionable behaviors they can use every day. Rather than focusing on theory alone, these guides provide practical examples that demonstrate what ethical and professional conduct looks like in action. Each guide focuses on a key area of responsibility and offers both "effective practices" to follow and "practices to avoid," making it easier to recognize and apply sound judgment in real situations. The Practice Guides cover four essential areas: * Commitment to Security and Risk Reduction - Learn how to align security initiatives with business goals, communicate risks effectively and foster a culture where security is a shared responsibility. * Responsibly Securing Emerging Technologies - Understand how to evaluate and manage security, privacy and data risks as organizations adopt new and evolving technologies. * Balancing Security and Business Objectives - Discover how to engage stakeholders early, communicate risk in business terms and support informed decision-making that enables the organization. * Responsible Use of Privileged Access - Reinforce accountability, transparency and disciplined access management practices to protect critical systems and data. Together, these guides emphasize that ethical cybersecurity practice is not about rigid rules - it's about making informed, balanced decisions that support both security and organizational success. To further support this, the Practice Guides include reflection prompts and a quick self-check tool, encouraging professionals to assess how the Code shows up in their daily work. These features help individuals identify strengths, pinpoint areas for growth and foster ongoing discussion across teams, promoting consistency in professional conduct. Whether you're leading security strategy, managing risk, or working hands-on with systems and data, the ISC2 Practice Guides offer practical, relevant guidance to help you navigate complex decisions with confidence and integrity. Download the Practice Guides today to start applying the Code of Professional Conduct in ways that strengthen trust, reduce risk and support your organization's mission.

ISC2 unveils AI security Incident exercises and new interactive learning formats for 2026 Security Congress. Award-winning cybersecurity conference convenes professionals across industries to foster a learning community of peers facing unprecedented challenges Alexandria, VA, July 1, 2026 - ISC2 - the world's leading nonprofit member organization for cybersecurity professionals - announced the addition of interactive AI Incident Rooms at its 2026 ISC2 Security Congress, taking place in Denver, October 24-28. These first-ever AI Incident Rooms address the fact that AI skills are in high demand across the cybersecurity workforce. The conference will also feature tabletops exercises and "Lessons from the Field" breakouts. These new learning formats will provide extended periods of hands-on, practical knowledge-sharing based on real-world scenarios. "Most cybersecurity professionals have limited opportunities to engage meaningfully with their peers together as a community, so this year we are evolving Security Congress by creating more sessions for attendees to learn directly from one another," said ISC2 CEO Scott Beale, CC. "We were especially intentional about creating the AI Incident Rooms centered on pragmatic problem-solving around AI security. According to the 2025 ISC2 Cybersecurity Workforce Study, AI represented the most pressing skills need, as cited by 41% of participants who said their organization's security team has at least one skills need." These interactive experiences complement ISC2's world-class educational sessions by giving attendees the chance to test ideas, share experiences and build practical skills in realistic scenarios that reflect today's AI-influenced threat landscape. The AI Incident Rooms and tabletops are available exclusively to in-person attendees. Specifically, Security Congress will feature: * AI Incident Rooms - These facilitated 150-minute, scenario-based problem-solving discussions explore how AI-enabled cyber challenges unfold and how security teams can respond. Designed to encourage collaboration and critical thinking, these sessions will host no more than 50 attendees at a time, offering a hands-on opportunity to examine emerging AI issues and to evaluate strategies. Advanced reservations are available upon event registration while seats last. * Tabletop Exercises - These 60- and 120-minute interactive sessions will combine small-group tabletop exercises and collaborative problem-solving. Participants will work through realistic cybersecurity scenarios to test decision-making, strengthen teamwork and apply security concepts in a dynamic environment. Advanced reservations are available upon event registration while seats last. * Lessons from the Field - Available to both in-person and virtual attendees, these 60-minute breakout sessions will provide detailed accounts and case studies of how organizations and individuals successfully navigated cybersecurity challenges, incidents and complex security situations. Participants will gain firsthand insights, practical takeaways and lessons learned from real-world experiences. Designed to encourage dialogue, engagement and on-the-spot decision-making, these experiences will help attendees work through cyber crises and emerging challenges, including ransomware attacks, data breaches and the growing impact of AI on security operations. By engaging with peers, participants can take advantage of Congress as the in-person extension of ISC2's robust community, leaving with best practices and lessons learned to strengthen their own organization's cybersecurity resilience. 2026 Cyber Security Community of the Year ISC2 Security Congress is the premier global conference of ISC2, convening thousands of cybersecurity professionals from across sectors, career stages and geographies to advance the profession and strengthen the global cyber community. What differentiates Security Congress from many industry events is its practitioner-first focus, allowing attendees to engage and collaborate with a supportive community of professional peers. ISC2 Security Congress was recently named 2026 Cyber Security Community of the Year by Cyber Security Awards and won gold in the Conference category of the Titan Business Awards. Security Congress at a Glance ISC2 Members, Candidates and Associates are eligible for discounted registration rates across all pass types and can earn up to 81.5 CPE credits through live attendance and on-demand viewing. Attendees who participate in pre-conference workshops on October 24-25, covering topics such as AI, leadership and zero trust, can earn an additional 16+ CPE credits. The event is also available online. In addition to these new interactive learning experiences, Security Congress will feature four keynote presentations, more than 100 expert speakers and educational sessions covering the latest cybersecurity trends, emerging technologies, workforce developments and best practices from across the profession. Early Bird registration rates are available through September 9, 2026. About Security Congress. Security Congress brings together cyber, information, software and infrastructure security professionals for an annual conference designed to enrich careers, enable advancement so that attendees may excel in their profession. Since 2011, ISC2 has hosted this annual conference around the United States, with this year's event taking place in Denver, Colorado (U.S.) from October 24-28 at the Gaylord Rockies. For more information on Security Congress, visit https://www.isc2.org/Congress or follow ISC2 Inc. on LinkedIn. About ISC2. ISC2 is the world's leading member organization for cybersecurity professionals, driven by its vision of a safe and secure cyber world. Its more than 265,000 certified members, and associates, are a force for good, safeguarding the way ISC2 Inc. live. Its award-winning certifications - including cybersecurity's premier certification, the CISSP(R)- enable professionals to demonstrate their knowledge, skills and abilities at every stage of their careers. ISC2 strengthens the influence, diversity and vitality of the cybersecurity profession through advocacy, expertise and workforce empowerment that accelerates cyber safety and security in an interconnected world. Its charitable foundation, the Center for Cyber Safety and Education, helps create more access to cyber careers and educates those most vulnerable. Learn more, get involved or become an ISC2 Candidate to build your cyber career at ISC2.org. Connect with ISC2 Inc. on X, Facebook and LinkedIn. (C) 2026 ISC2 Inc., ISC2, CISSP, SSCP, CCSP, CGRC, CSSLP, HCISPP, ISSAP, ISSEP, ISSMP, CC, and CBK are registered marks of ISC2, Inc. Media contact. Amanda Steinman Senior Corporate Communications Manager ISC2 [email protected]