CAICSO study guide
CAICSO · Work through your exam, one topic at a time.
The CAICSO is a vendor-neutral certification aimed at security and risk professionals who are responsible for securing artificial intelligence systems rather than building models. It suits security architects, GRC analysts, AI/ML engineers moving into security, auditors, and consultants who need to speak credibly about both adversarial machine learning and the governance frameworks around it. The CAICSO study guide has 8 sections and about 2,797 words.
01AI Governance, Risk, and Compliance Frameworks
Domain 1 tests how well you can place an AI system inside a governance and compliance operating model: who is accountable, which framework applies, how risk is classified, and what evidence proves control operation. Expect questions that mix NIST AI RMF functions, ISO/IEC 42001 management-system clauses, ISO/IEC 23894 risk guidance, EU AI Act risk tiers, and sector rules.
360 words, about 2 min02AI Risk Identification and Assessment
Domain 2 tests whether you can identify AI-specific risks and run a defensible assessment, not just list model accuracy metrics. Questions often ask you to choose a method, score inherent and residual risk, or spot a missing risk category in a register.
361 words, about 2 min03AI Security Architecture and Controls
Domain 3 tests security architecture for AI systems: how to layer preventive, detective, and responsive controls across data, model, application, API, and agent/tool layers. Expect design-review questions and control-selection scenarios, not pure theory.
359 words, about 2 min04AI Threat Landscape and Adversarial Techniques
Domain 4 tests recognition of adversarial techniques across the AI lifecycle and the ability to match a technique to a plausible control. Questions may describe an attack path and ask what class it is, or ask which defense reduces a specific risk.
334 words, about 2 min05AI Data Security and Privacy
Domain 5 tests data protection across the AI lifecycle: collection, preparation, training, retrieval, inference, and deletion. Expect questions on sensitive data in embeddings, memorization, access control, and privacy-by-design.
336 words, about 2 min06AI Model Lifecycle Security and MLOps
Domain 6 tests secure model lifecycle and MLOps: how to build, train, test, deploy, monitor, and retire models without weakening controls. Expect pipeline-design and artifact-integrity questions.
328 words, about 2 min07AI Incident Response and Monitoring
Domain 7 tests incident response and monitoring for AI systems: how to detect AI-specific incidents, contain them, preserve evidence, and meet notification duties. Expect playbook and monitoring-design questions.
363 words, about 2 min08AI Security Program Leadership and Communication
Domain 8 tests program leadership: how to build and run an AI security program, set risk appetite, assign roles, measure performance, and communicate with executives, engineers, regulators, and customers. Expect scenario questions on prioritization and stakeholder messaging.
356 words, about 2 min