Twenty-five years in the past, Jay Bavisi based EC-Council within the aftermath of 9/11 with a simple premise: if attackers perceive methods deeply, defenders want to know them simply as effectively. That concept led to Licensed Moral Hacker (CEH), which went on to change into some of the well known credentials in cybersecurity.
Bavisi thinks we’re at an identical inflection level once more—this time with AI.
The know-how is shifting quick. The workforce isn’t. And identical to the early days of software program improvement, many of the consideration is on what AI can do, not on find out how to deploy it safely, responsibly, or at scale.
“We’re again in that period the place constructing one thing feels cool,” Bavisi informed me. “Within the early days of net improvement, safety and governance have been afterthoughts. We’re doing the identical factor once more with AI—performance first, use instances first, and solely later asking what the dangers are.”
That’s the hole EC-Council is making an attempt to handle with the biggest growth of its portfolio in 25 years: 4 new AI certifications and a revamped Licensed CISO program.
The Expertise Hole Isn’t Hypothetical
The information behind this push isn’t delicate. IDC estimates unmanaged AI danger may attain $5.5 trillion globally. Bain tasks a 700,000-person AI and cybersecurity reskilling hole within the U.S. alone. The IMF and World Financial Discussion board have each landed on the identical conclusion: entry to know-how isn’t the constraint—individuals are.
I’ve spent the final couple of years speaking with executives about AI, and the tone has shifted. Early on, almost everybody insisted AI wasn’t going to exchange jobs. It turned nearly ritualistic. Comprehensible, positive—however not totally sincere.
Recently, the messaging has modified. Some roles will disappear. That’s not controversial anymore. The extra correct framing has all the time been: AI most likely received’t take your job, however somebody who is aware of find out how to use AI higher than you would possibly. That’s the actual danger—and the actual alternative.
What EC-Council Is Really Launching
The brand new certifications are constructed round a framework EC-Council calls ADG: Undertake, Defend, Govern. It’s meant to provide organizations a approach to consider AI intentionally, reasonably than defaulting to “simply purchase a subscription and see what occurs.”
“It’s not nearly choosing Claude or Gemini or GPT,” Bavisi mentioned. “Your knowledge, your buyer info, what you are promoting processes all get pulled in. You want guardrails.”
The 4 certifications are role-specific:
- AI Necessities (AIE) is baseline AI fluency—sensible, not theoretical.
- Licensed AI Program Supervisor (C|AIPM) focuses on implementing AI packages with accountability and danger administration.
- Licensed Accountable AI Governance & Ethics Skilled (C|RAGE) targets governance gaps, aligning with frameworks like NIST AI RMF and ISO/IEC 42001.
- Licensed Offensive AI Safety Skilled (COASP) teaches practitioners find out how to assault LLM methods in order that they perceive find out how to defend them.
That final one feels particularly on-brand. It’s primarily the CEH mindset utilized to AI: you possibly can’t shield what you don’t perceive.
Why This Isn’t Tutorial
Bavisi shared a current instance that places the urgency into perspective. EC-Council took half in a managed take a look at with a top-ten international insurance coverage firm. They in contrast conventional human-led pen testing towards the AI strategy.
Throughout three rounds, people discovered 5 complete vulnerabilities. The AI discovered 37.
That’s not an indictment of human talent. It’s a reminder that AI doesn’t get drained, doesn’t overlook, and doesn’t function inside the similar constraints. The job doesn’t disappear—however the expectations round the way it’s finished change dramatically.
The CISO Position Is Altering Too
Alongside the AI certifications, EC-Council up to date its Licensed CISO program to model 4. Safety leaders are actually accountable for methods that study, adapt, and make choices autonomously, however that’s not what most CISOs educated for a decade in the past.
The up to date curriculum displays that actuality—much less guidelines safety, extra governance, danger possession, and accountability in AI-driven environments.
Why This Issues
Certifications don’t magically make somebody an professional. I’ve collected sufficient of them over time to know that. However they do matter. They open doorways. They sign baseline competency. And proper now, that sign carries extra weight than ordinary.
“There are cloud engineers and GRC professionals in all places asking the identical query,” Bavisi mentioned. “How do you do governance and danger with AI? Till now, there haven’t been actual frameworks or actual coaching packages.”
AI isn’t slowing down. The workforce has to catch up. EC-Council is betting that structured, role-based training—grounded in sensible actuality reasonably than hype—will help shut that hole. Given what they did with CEH, it’s a wager price listening to.
I’ve a ardour for know-how and devices and a need to assist others perceive how know-how can have an effect on or enhance their lives. I additionally love spending time with my spouse, 7 children, 4 canine, 5 cats, a pot-bellied pig, and sulcata tortoise, and I prefer to assume I take pleasure in studying and golf regardless that I by no means make time for both. You possibly can contact me straight at tony@xpective.web. For extra from me, you possibly can observe me on Threads, Fb, Instagram and LinkedIn.
