AP Cybersecurity is College Board's newest course, part of the new AP Career Kickstart program, and it's launching nationally for the 2026 to 2027 school year with the first exam in May 2027. No prior coding experience is required, which makes it accessible to students who haven't taken AP CS A or CS Principles.
The course is built around three core skills. Analyzing risk, mitigating risk, and detecting attacks. Rather than teaching cybersecurity as one broad topic, the course structures everything around these three actions, applied across five units.
It covers defense across multiple layers. Physical spaces, networks, devices, applications, and data each get their own unit, and students learn how threats and defenses differ across each layer rather than treating cybersecurity as a single skill.
Labs are hands-on, not just theoretical. Students work through realistic attack scenarios and practice both defending systems and understanding how attacks are carried out, which is closer to how cybersecurity is actually practiced professionally.
It's designed to align with industry expectations. The course maps to the NICE Workforce Framework, the same framework used by many employers and certification bodies, so the skills taught aren't just exam skills.
College credit and an industry credential are both on the table. Like other AP courses, a strong exam score can earn college credit. But the course is also designed to signal readiness for entry-level cybersecurity roles or further study, which is unusual among AP courses.
Because it's brand new, there isn't yet a large bank of past exam questions the way there is for AP CS A. Early cohorts should expect the course content and skills to matter more than exam pattern-matching, at least for the first few exam cycles.