ConvoCourses

Domain 4 is 19% of the SecAI+ exam — and it's the part most security people skip because it "isn't technical." That's a mistake. Governance is the control above all the other controls. In this live session we break down:

4.1 — Governance structures: AI Center of Excellence, AI policies & procedures, and all 10 AI-related roles (data scientist, AI architect, ML engineer, platform engineer, MLOps engineer, AI security architect, AI governance engineer, AI risk analyst, AI auditor, data engineer)

4.2 — AI risks: the 10 Responsible AI principles, the 6 named risks (bias, data leakage, reputational loss, model accuracy, IP risk, autonomous systems), and Shadow IT → Shadow AI Differential privacy — and why it is NOT the same thing as encryption or anonymization

4.3 — Compliance: EU AI Act, NIST AI RMF, ISO/IEC 42001, OECD, data sovereignty #CompTIA #SecAIPlus #CY0001 #AISecurity #AIGovernance #Cybersecurity #CyberCertification

3.2 Explain how AI enables or enhances attack vectors. ▪ AI-generated content (deepfake) • Impersonation • Misinformation • Disinformation ▪ Adversarial networks ▪ Reconnaissance ▪ Social engineering ▪ Obfuscation ▪ Automated data correlation ▪ Automated attack generation • Attack vector discovery • Payloads • Malware • Honeypot • Distributed denial of service (DDoS)