Defining Cybersecurity Roles in the AI Era — Lessons from ISC2’s New Coalition and Four Courses
On 19 October 2026, ISC2 introduced four new AI security courses. The following day, it announced the Cyber-AI Workforce Coalition. The emerging area of competition is no longer limited to knowledge about using AI safely; it also includes how roles, judgement and competence should be defined and assessed.
What has been announced
The coalition will bring together employers, technology companies, academic institutions and workforce organisations. It intends to create a competency toolkit describing how cybersecurity roles and skills are changing. At launch, the detailed toolkit and the full founding membership had not yet been published.
The four courses cover AI governance architecture, discovery and inventory of sensitive data used by AI, AI policy mapping, and decisions based on competing AI risk signals. ISC2 lists each course as worth three CPE credits, with a standard price of US$120.
Why this matters to Cyber Hiroshima
Cyber Hiroshima is considering how to connect a CyBOK knowledge base, practice through SudoRange, AI-assisted learning and Personalised Learning. ISC2’s move suggests that learning outcomes should include accountability, governance, data handling and defensible decisions as well as technical knowledge. This is an inference for the business; no collaboration with ISC2 or adoption of its future toolkit has been agreed.
What could be tested
- Separate ‘know’, ‘perform’, ‘explain’ and ‘approve’ outcomes by learner role, even when people use the same source material.
- Include tasks in which learners must detect a poor AI priority and justify a human override.
- Link the CyBOK Version 1.2.0 source, exercise evidence, AI guidance and the learner’s final decision in one assessment record.
A Private AI Appliance remains a future concept. A practical first step would be a small, anonymised evaluation of source attribution, access control and the reproducibility of decisions.