Certified AI Security Professional (CAISP) Prep

Home
Paths
Certified AI Security Professional (CAISP) Prep

Certified AI Security Professional (CAISP) Prep

A guided, multi-course journey that builds this skill from the ground up. Work through the chapters in order, or jump to any lesson.

Progress0%

1CAISP at a Glance 2How CAISP Challenges and the Report Work 3Study Plan and Syllabus Ledger

4AI, ML, and Deep Learning for Security Practitioners 5Anatomy of an AI System 6RAG and Chatbot Architecture 7Challenge Practice — Map an AI Application's Attack Surface 8Introduction to AI Security Drill

9How LLMs Work — Transformers, GPT, and BERT 10Tokenizers, Context, and Model Behaviour 11Training, Fine-Tuning, and RAG Compared 12LLM Use Cases and Their Risk Profiles 13MITRE ATT&CK, MITRE ATLAS, and Malicious LLM Tools 14Adversarial and Backdoor Attacks on Language Models 15Confusable LLM Attack Terms 16Challenge Practice — Probe a Chatbot and Classify the Attacks 17Understanding and Attacking LLMs Drill

18The OWASP Top 10 for LLM Applications — Map and Editions 19Prompt Injection and System Prompt Leakage 20Insecure Output Handling, Overreliance, and Misinformation 21Insecure Plugin Design and Excessive Agency 22Training Data Poisoning and Supply Chain Vulnerabilities 23Sensitive Information Disclosure, Vector and Embedding Weaknesses, and Model Theft 24Model Denial of Service and Unbounded Consumption 25Confusable LLM Risks 26Challenge Practice — Find and Classify LLM Application Vulnerabilities 27OWASP LLM Top 10 Drill

28AI in the DevOps Pipeline — MLOps and LLMOps 29Attacks on Model Pipelines 30Case Studies — Hugging Face, NotPetya, and SAP AI Core 31Pipeline Security Tooling — SCA, SAST, DAST, Model Scanners, and AI Firewalls 32Building Security Gates into an ML Pipeline 33Challenge Practice — Triage AI Pipeline Scan Results 34AI Attacks and Defenses Using DevOps Drill

35Threat Modeling Fundamentals 36Data Flow Diagrams for LLM Architectures 37STRIDE for LLM Systems and AI Threat Libraries 38Risk Rating and Mitigation Planning 39Challenge Practice — Threat Model a RAG Assistant with Tools 40Threat Modeling AI Systems Drill

41The AI Supply Chain and Its Attack Types 42Package Masquerading and Dependency Hygiene 43SLSA and SCVS 44SBOMs, ML-BOMs, and Model Signing 45Challenge Practice — Vet a Model and Its Dependencies 46Supply Chain Attacks in AI Drill

47Emerging Threats — Model-Mediated Supply Chain Attacks, Model Worms, and Fine-Tuning Backdoors 48AI Agents and Their Security Risks 49AI Risk Frameworks — NIST AI RMF and ISO/IEC 42001 50AI Regulation — The EU AI Act and US Legislation 51Confusable Emerging-Threat and Governance Terms 52Challenge Practice — Assess an AI Agent Deployment 53Emerging Threats, Governance, and Compliance Drill

54Mock Challenge 1 — Attack a Customer-Support Chatbot 55Mock Challenge 2 — Exploit an Over-Privileged LLM Integration 56Mock Challenge 3 — Triage Automated AI Security Scans 57Mock Challenge 4 — Investigate a Compromised Model Supply Chain 58Mock Challenge 5 — Threat Model and Assess an AI Agent 59Write the Findings Report 60Readiness Review and Exam-Day Plan

Related content