ISC2 Launches Cyber-AI Workforce Coalition to Define the Future of Cybersecurity Skills

Artificial intelligence is changing the responsibilities of cybersecurity professionals. A new initiative from ISC2 aims to identify the knowledge, competencies and professional capabilities organisations will need as AI becomes increasingly integrated into security operations.

On 20 October 2026, ISC2 announced the establishment of its Cyber-AI Workforce Coalition, bringing together employers, technology companies, academic institutions and workforce development organisations.

The initiative will examine how artificial intelligence is changing cybersecurity roles, workplace responsibilities and professional skills requirements.

Its principal objective is to develop a competency toolkit that organisations can use to inform recruitment, workforce planning and professional development.

The announcement reflects a growing recognition that integrating AI into cybersecurity requires more than adopting new technologies. Organisations must also ensure that the professionals responsible for their security operations understand how AI systems operate, where their limitations lie and how associated risks should be managed.

How Is AI Changing Cybersecurity Roles?

Artificial intelligence is increasingly being incorporated into security monitoring, threat detection, vulnerability management and incident response.

These developments can help security teams analyse large volumes of information and identify potential threats more efficiently.

However, AI-supported cybersecurity also introduces additional responsibilities.

Professionals may need to assess the reliability of automated security recommendations, investigate unexpected system behaviour and determine when human intervention is necessary.

Cybersecurity teams must also consider the security of the AI systems themselves.

This includes understanding how AI applications process sensitive information, how their outputs can be manipulated and how organisations should respond when automated systems produce incorrect or potentially harmful results.

As these capabilities become more widely adopted, existing professional roles may evolve.

A security analyst, for example, may increasingly be expected to evaluate AI-generated threat assessments rather than simply review conventional security alerts.

Similarly, information security managers may need to establish governance processes covering AI-enabled systems alongside traditional cybersecurity controls.

These are potential developments in professional responsibilities rather than findings establishing that all organisations have already experienced these changes.

What Will the ISC2 Cyber-AI Workforce Coalition Do?

According to ISC2, the coalition will bring together organisations involved in cybersecurity employment, technology development, education and workforce planning.

Participants will collaborate on developing a competency toolkit intended to provide greater clarity about the skills cybersecurity professionals will require.

The proposed toolkit is expected to address how employers recruit, develop and organise cybersecurity talent.

It should also help individual professionals identify areas where additional knowledge or training may be beneficial.

An important feature of the initiative is its emphasis on incorporating the experiences of cybersecurity practitioners.

ISC2 intends to develop a common understanding of emerging workforce requirements informed by employers and professionals working directly with AI-enabled technologies.

The organisation announced that it would convene a founding group during autumn 2026 to help establish the coalition's agenda.

The coalition has been announced, but its planned competency toolkit should not yet be treated as a completed or formally adopted professional framework.

The Relationship Between AI Security and Professional Certification

The coalition forms part of ISC2's wider activities addressing artificial intelligence and cybersecurity.

In July 2026, ISC2 announced that it was developing a dedicated AI security certification.

The proposed qualification is intended to establish a vendor-neutral approach to assessing professional knowledge and competencies associated with securing AI systems and managing AI-related risks.

This development is separate from the newly announced coalition.

The certification remains under development, and the coalition's planned competency toolkit should not be confused with an established certification syllabus or examination framework.

Alongside these initiatives, ISC2 continues to provide professional development opportunities addressing AI security and governance.

On 19 October 2026, ISC2 highlighted four recently introduced courses covering AI governance architecture, AI-driven data discovery, AI policy mapping and enterprise AI risk assessment.

These developments illustrate how professional training providers and certification bodies are beginning to address the relationship between established cybersecurity responsibilities and emerging AI-specific competencies.

Why Does This Matter for Cybersecurity Professionals?

Cybersecurity professionals increasingly need to understand systems that combine conventional computing infrastructure with artificial intelligence.

Existing expertise in access management, information security, risk assessment and incident response remains relevant.

However, professionals may also benefit from additional knowledge concerning AI system architecture, model vulnerabilities, data governance and the oversight of automated decisions.

For organisations, this raises questions about the effectiveness of existing professional development arrangements.

Training programmes designed primarily around conventional cybersecurity systems may not address every challenge associated with AI-enabled infrastructure.

Similarly, general AI awareness programmes may provide insufficient technical depth for professionals responsible for securing complex systems.

Organisations should therefore consider whether employees have the specialist knowledge appropriate to their responsibilities.

What Should Organisations in Qatar and the GCC Consider?

Although the ISC2 initiative is international rather than specific to the Gulf region, its objectives are relevant to employers across Qatar, Saudi Arabia, the UAE, Bahrain, Kuwait and Oman.

Organisations introducing AI into their technology environments can use the announcement as an opportunity to examine their workforce development requirements.

Four areas merit consideration.

1. Assess existing cybersecurity capabilities

Review the skills of professionals responsible for information security, risk management and AI-enabled systems.

Identify whether existing training sufficiently addresses AI-specific vulnerabilities and operational risks.

2. Identify emerging responsibilities

Consider whether the introduction of AI changes the responsibilities of security analysts, IT managers, auditors and governance professionals.

Where necessary, update internal competency requirements and professional development plans.

3. Connect AI governance with cybersecurity training

AI governance should not be treated as entirely separate from cybersecurity.

Professionals may need complementary capabilities in information security, risk management, data protection and AI system oversight.

4. Prioritise measurable professional development

Organisations should consider whether training improves employees' ability to identify risks, evaluate security controls and respond appropriately to incidents involving AI systems.

These recommendations concern workforce development and organisational good practice. The ISC2 announcement does not create new legal or regulatory obligations for organisations in Qatar or elsewhere in the GCC.

Developing AI Security Capabilities Through Professional Training

The changing relationship between AI and cybersecurity reinforces the importance of continuing professional development.

Organisations need employees who can combine established security principles with an understanding of emerging technologies.

For professionals pursuing leadership responsibilities, qualifications such as the ISC2 Certified Information Systems Security Professional (CISSP) remain relevant to broader cybersecurity management and security architecture.

Additional specialist development may be appropriate where responsibilities involve AI security, AI governance or the management of AI-related risks.

MENA Executive Training supports organisations across Qatar and the wider GCC through professional training in cybersecurity, information security management, artificial intelligence governance and risk management.

Its programmes include ISC2 CISSP training, ISACA security and risk management qualifications and the IAPP Artificial Intelligence Governance Professional (AIGP) programme.

As AI becomes more deeply integrated into organisational systems, cybersecurity workforce development will need to account for both established professional competencies and emerging responsibilities.

ISC2's new coalition represents an attempt to develop a clearer understanding of those changing requirements, providing a basis for future professional development and workforce planning.