CompTIA SecAI+ Study Roadmap

Domain 1: AI Fundamentals — AI types, ML techniques, transformers, GANs, supervised/unsupervised/reinforcement learning

Domain 1: AI Data & Lifecycle — Data processing, RAG, vector embeddings, prompt engineering, human-in-the-loop

Domain 2: Threat Modeling — OWASP LLM Top 10, MITRE ATLAS, MIT AI Risk Repository, CVE AI Working Group

Domain 2: AI Security Controls — Prompt firewalls, guardrails, rate/token limits, gateway controls, endpoint access

Domain 2: Access & Data Controls — Model/data/agent/API access, encryption (transit/rest/in-use), anonymization, masking

Domain 2: Monitoring & Attack Analysis — Prompt monitoring, log protection, hallucination detection, bias auditing, AI cost monitoring

Domain 3: AI Security Tools — IDE/browser/CLI plug-ins, chatbots, MCP servers, anomaly detection, automated pen testing

Domain 3: AI Threats & Automation — Deepfakes, AI social engineering, AI agents, CI/CD scanning, automated incident response

Domain 4: Governance & Compliance — AI CoE, roles, EU AI Act, NIST AIRMF, OECD/ISO standards, Shadow AI, data sovereignty

Full Review: Practice tests, scenario-based labs, PBQ practice, OWASP/MITRE reference review, exam logistics