After this course you can identify risks in AI applications and treat them with suitable controls, from prompt injection and poisoned training data to unprotected model access. You can also judge where AI genuinely helps in security operations and where it creates new problems, and apply regulatory and risk requirements to real projects. The course suits you if you already work in cybersecurity and want to add AI security to your profile. It is too demanding as a first step into IT security.
What you’ll take away.
- Classify attacks on models, data pipelines and inference, and choose suitable safeguards
- Critically assess AI tools for detection, triage and automation in security operations
- Apply GDPR and NIST AI RMF requirements to an AI project
- Work through the four CY0-001 domains and address your own gaps
Your training in detail
- Who is it for?
- Security engineers, analysts and SOC staff who protect or use AI systems, plus governance and compliance specialists with a technical background.
- Prerequisites
- There are no formal prerequisites. CompTIA recommends three to four years in IT, at least two of them hands-on in cybersecurity, plus Security+, CySA+, PenTest+ or equivalent knowledge.
- Format & planning
- Standard length: 5 training days. A different length can be arranged for companies.
Agenda: from understanding to application
Our independently developed agenda proposal. Focus areas, lab environment and scope are agreed before booking.
AI basics from a security angle: machine learning, deep learning and NLP
Threats: prompt injection, data poisoning, adversarial machine learning and automated phishing
Security controls for AI in on-premises, cloud and hybrid environments
AI in security operations: detection, response, triage and orchestration
Governance, risk and compliance across the AI lifecycle
CY0-001 domains and question types, with a study plan
You review the architecture of a fictional internal AI assistant, derive a threat model and prioritise safeguards for the data pipeline, model access and outputs.
Exams, licences & credentials
This course prepares you for the CompTIA SecAI+ exam (CY0-001). The exam and its fees are included only if your offer confirms this. The certificate comes from CompTIA, not NextNowa. This is not an official CompTIA course.
Vendor references & review date
Sources checked on 2026-11-04. These sources describe the technology or external exam requirements. They do not imply a partnership with NextNowa.
Your learning content
These objectives describe the training topic. The specific syllabus, dates and trainer are agreed before booking; the written offer is binding.
Frequently asked questions
Do I need Security+ first?
It is not mandatory, but CompTIA recommends Security+, CySA+, PenTest+ or equivalent knowledge. You should be confident with that material, because the course builds on it.
Which exam domain carries the most weight?
Securing AI systems makes up 40 per cent of the exam according to CompTIA, so the course gives this area plenty of time.
Does CompTIA SecAI+ (CY0-001): securing AI systems include a certificate?
This course prepares you for the CompTIA SecAI+ exam (CY0-001). The exam and its fees are included only if your offer confirms this. The certificate comes from CompTIA, not NextNowa. This is not an official CompTIA course.
