CAIPM, COASP, and CRAGE now meet the accreditation requirements of ISO/IEC 17024, the global benchmark for professional certification, as AI spreads faster than the governance and skills needed to control it.
TAMPA, Fla., November xx 2026: EC-Council, creator of the Certified Ethical Hacker (CEH) credential and a global leader advancing cybersecurity and Responsible AI, today announced that three of its artificial intelligence certifications have been accredited by the ANSI National Accreditation Board (ANAB) under ISO/IEC 17024. The accredited credentials are the Certified AI Program Manager (CAIPM), the Certified Offensive AI Security Professional (COASP), and the Certified Responsible AI Governance & Ethics (CRAGE).
ISO/IEC 17024 establishes internationally recognized requirements for bodies that certify the competence of individuals. It provides a framework for ensuring that personnel certification schemes are developed and operated through a structured, impartial, transparent and consistently governed process, with certification decisions based on demonstrated competence.
The three AI credentials bring EC-Council’s ANAB-accredited portfolio to 11 certifications, joining Certified Ethical Hacker (CEH), CEH (Practical), Certified Penetration Testing Professional (CPENT), Certified Chief Information Security Officer (CCISO), Certified Network Defender (CND), Computer Hacking Forensic Investigator (CHFI), EC-Council Certified Incident Handler (ECIH), and Certified Cybersecurity Technician (CCT). CEH has held ANAB accreditation since 2012.
The accreditation arrives as AI is being deployed faster than organizations can govern it. On October 29, attackers stole digital assets worth approximately $6.34 billion from Binance in what is being described as the largest cryptocurrency theft on record. According to Binance’s November 3 incident report, the attackers abused an internal AI tool as part of a multistage intrusion involving compromised devices of engineers, stolen credentials, and unauthorized access to wallet-signing operations.
Binance is not an isolated case. In October alone, Wiz reported at least nine AI developer platforms disclosing incidents, with several showing signs that attackers used AI agents to move faster. OpenAI disclosed in October that it had halted frontier model training for 11 days after an internal research model exploited a security misconfiguration to reach the internet. Subsequent red-teaming exposed additional containment weaknesses, including virtual machine escapes and covert communication channels. Researchers also documented a real-world attempted attack targeting an AI coding agent through a malicious AGENTS.md file, with successful exploitation later demonstrated in controlled tests.
The pattern is consistent. AI systems are being given tools, credentials, and access with inadequate safeguards to contain them, insufficient governance over what they may do, and, in many organizations, limited visibility into their actions. The World Economic Forum’s Global Cybersecurity Outlook 2026 found that 87% of respondents identified AI-related vulnerabilities as the fastest-growing cyber risk in 2025, while insufficient knowledge and skills (54%) and the need for human oversight (41%) were among the leading barriers to deploying AI for cybersecurity.
That makes the human the deciding factor. Someone has to define what an AI system can and cannot do, test whether those limits hold, and answer for the outcome when they do not. Most of today’s security and technology workforce learned its craft before AI agents existed. That workforce now needs to demonstrate it can secure and govern AI.
Each accredited credential addresses a different stage of that responsibility, aligned with EC-Council’s Adopt. Defend. Govern. (ADG) Framework:
- Adopt: CAIPM prepares professionals to take AI from pilot to production, including how agents are scoped, what access they receive, and how adoption delivers measurable returns.
- Defend: COASP trains security professionals to attack AI systems before adversaries do, through hands-on red-teaming of large language models and AI agents, adversarial testing of the harness and context agents depend on, and identification of AI-specific vulnerabilities.
- Govern: CRAGE builds the skills to operationalize AI governance, including risk assessment, accountability for decisions made by AI systems, and alignment with the NIST AI Risk Management Framework (AI RMF) and ISO/IEC 42001.
The current edition of the framework, ADG 2.0, contains more than 180 controls and 720 requirements across 12 control families, mapped to more than 90 regulations, standards, and threat catalogs.
“A lot of what cyber professionals learned about security in a pre-AI world has to be relearned, and then proven,” said Jay Bavisi, Founder and Group CEO, EC-Council. “Binance didn’t lose control of an AI model. Attackers exploited an internal AI tool alongside compromised devices and credentials to reach critical systems. Deciding what an AI tool can access, and securing those boundaries, is a human responsibility. That responsibility belongs to people who are trained, tested, and held to a global standard. Machines will act faster than we can watch them. The people who set their limits have to be better than the machines they’re governing.“
“Twenty years ago, ethical hacking had no professional standard. We helped build one, and it changed how the world defends itself,” Bavisi added. “AI is at that same point now.“
All three certifications can be verified in ANAB’s official accreditation directory. More information is available at www.eccouncil.org.
About EC-Council
Founded in 2001, EC-Council is a global cybersecurity and AI organization focused on building the skills, capabilities and systems required for a more secure digital future.
EC-Council created the Certified Ethical Hacker (CEH) program and has certified more than 400,000 professionals across 174 countries. Its programs and credentials are used across government, defense, enterprise and academia worldwide.
As cybersecurity and AI converge, EC-Council is advancing Responsible AI through its proprietary Adopt, Defend, Govern (ADG) Framework, bringing together people, process and technology to help organizations adopt AI responsibly, defend digital environments and govern emerging technologies with greater accountability.
The EC-Council ecosystem includes EC-Council, EC-Council University (ECCU), CodeRed, EC-Council Global Services (EGS), EC-Council Academia and Aware.
For more information, visit www.eccouncil.org.
Media Contact: [email protected]
