CompTIA SecAI+ (CY0-001)
FHG University prepares you for this exam on the Identity & AI Security track. Here are the modules mapped to its published objectives, and the opening of one to read now.
Examination preparation — these exams are set and awarded by their issuers. FHG prepares you for them and cannot grant them.
The modules mapped to it
9 modules · about 14 h 35 min estimated in all
Employee AI Safety Training
Build the AI module that standard security awareness training is missing: why the tool tier and account decide what happens to pasted data, a data rule employees can actually apply, a one-page acceptable AI use policy with a no-blame reporting channel, and a way to measure whether behavior changed. Maps to SecAI+ governance objectives and Security+ awareness and policy objectives, and notes the EU AI Act's AI literacy duty as amended in July 2026.
The Situation: AI at Every Desk, Policy Somewhere Else
An employee has a deadline, a messy spreadsheet and a chatbot one browser tab away. They paste the spreadsheet in, ask for a cleaner version, and get exactly what they wanted. Nothing malicious happened, and nothing alerted. Whether that was fine depends on facts the employee probably never checked: which tool it was, which account they were signed into, what that account's terms say about keeping and training on content, and what was in the spreadsheet.
That gap has a name. Shadow AI is the use of AI tools the organization has not approved, or approved tools used in ways the organization has not approved, such as a personal account on a sanctioned product. CompTIA's SecAI+ (CY0-001) objectives list shadow AI and accidental data leakage among the AI risks a security professional is expected to explain (objective 4.2), and list corporate policy on sanctioned versus unsanctioned tools, private versus public models and sensitive data governance under compliance (objective 4.3).
Standard security awareness training was built around phishing, passwords, removable media and social engineering. Those topics still matter, and Security+ SY0-701 objective 5.6 still lists them (CompTIA expects its successor, SY0-801, on or around 17 November 2026; check the current outline's numbering). What it does not cover by default is the new decision employees make dozens of times a week: should this content go into this AI tool? This module builds the training that answers that question, the one-page policy behind it, and a way to tell whether it changed anything.
What this module is not: it does not configure the technical controls. Data loss prevention, retention settings and logging are in LLM Privacy Hardening; vendor contracts are in Secure AI Procurement: A Buyer's Security Questionnaire; deepfake call verification is in The Deepfake Defense Toolkit for Remote Teams. Training tells people what to do. Controls catch what training misses. You need both.
Members · the rest of this module
You’ve read 1 of 10 sections.
Members read the rest of this module and every module listed above, in their track’s order, and each one they finish is logged in hours with a content outline. $25 a month, cancel any time.
Already a member? Sign in, then pick up from your dashboard.
Add FHG to how you study. Keep every hour on record.
Members keep a record of the modules they finish and the study time each one takes.
Preparation means the material maps to the published objectives. It is not a promise of a pass, and CompTIA sets, administers and awards the exam.