CompTIA SecAI+ Study Roadmap

Domain 1: AI Fundamentals (AI types, ML techniques, transformers, GANs, supervised/unsupervised/reinforcement learning)

Domain 1: AI Data & Lifecycle (Data processing, RAG, vector embeddings, prompt engineering, human-in-the-loop)

Domain 2: Threat Modeling (OWASP LLM Top 10, MITRE ATLAS, MIT AI Risk Repository, CVE AI Working Group)

Domain 2: AI Security Controls (Prompt firewalls, guardrails, rate/token limits, gateway controls, endpoint access)

Domain 2: Access & Data Controls. Model/data/agent/API access, encryption (transit/rest/in-use), anonymization, masking

Domain 2: Monitoring & Attack Analysis (Prompt monitoring, log protection, hallucination detection, bias auditing, AI cost monitoring)

Domain 3: AI Security Tools (IDE/browser/CLI plug-ins, chatbots, MCP servers, anomaly detection, automated pen testing)

Domain 3: AI Threats & Automation (Deepfakes, AI social engineering, AI agents, CI/CD scanning, automated incident response)

Domain 4: Governance & Compliance (AI CoE, roles, EU AI Act, NIST AIRMF, OECD/ISO standards, Shadow AI, data sovereignty)

Full Review: Practice tests, scenario-based labs, PBQ practice, OWASP/MITRE reference review, exam logistics