CompTIA announced on 22 October that it plans a credential for people who deploy, secure and govern AI agents, and it expects to release it in the second quarter of 2027. HR teams should write the job descriptions for those roles now, because the five skill areas CompTIA listed are already enough to hire against.
The roles exist before the standard does
In its announcement, CompTIA says AI agents are moving into enterprise operations while the skills needed to manage them remain undefined. It cites two figures from other organizations: KPMG’s first-quarter 2026 survey found that 54% of organizations are actively deploying AI agents, and Deloitte found that only 21% of surveyed companies have a mature governance model for autonomous agents.
Put those next to each other and the gap is staffing. More than half of organizations are running agents, and about one in five has the governance model that someone has to operate. A credential scheduled for Q2 2027 does nothing for the agents already running this quarter.
Carl Bowman, senior vice president of exam services at CompTIA, framed the problem as accountability. He said: “The focus has been on what AI agents can do, but the more urgent question is who will secure, govern and be accountable for them.” That is a staffing question as much as a technical one, and it lands on HR because a named person with a defined role is what accountability requires.
The five skill areas are a usable job spec
CompTIA lists what the planned AgentOps+ certification is expected to validate: deploying and integrating AI agents, securing agent identities, permissions and data access, monitoring performance, behavior and operational health, responding to agent-related risks and incidents, and supporting governance, accountability, auditability and human oversight. CompTIA says the certification is intended for professionals in DevOps, cloud operations, platform engineering, systems administration and cybersecurity.
That list reads like a job description. An HR team can turn each line into a responsibility, map it to an existing job family, and decide which current employees could grow into it. None of that needs the exam to exist. I would write one role profile this quarter, name the manager who owns it, and open the requisition or the internal development path while the market is still thin.
The strongest objection
The best argument for waiting is that a job description written before the standard may need rewriting once the standard lands. CompTIA says AgentOps+ is being designed around “durable operational principles” and not around any one provider’s products, so a profile written against today’s tools could date quickly.
That risk is real, and it argues for building the profile on the duties CompTIA has already named and leaving product names out of it. A role defined as owner of agent permissions, monitoring and incident response survives a change of vendor. When the credential is published, HR can add it as a preferred qualification and leave the rest of the profile alone. Waiting costs more, since the agents keep running and nobody holds the role.
There is a second reason to move early. The people best placed to grow into these roles already work for the company, in systems administration, cloud operations and security. If HR waits for the credential, those employees learn about the path from a training vendor’s marketing. If HR publishes the role profile first, they can ask their managers about it in the next review cycle, and the company decides who gets development time before the course catalog does.
The profile itself can stay short. It needs the duties from the five skill areas, a reporting line that does not run through the team whose agents are being monitored, and an escalation path for an agent that behaves outside its permissions. Those three items are decisions for HR and the business, and no exam will make them.
What HR should do this quarter
I would ask for three things from the CIO or the head of security before year end.
- A list of the AI agents the company already runs, with the team that owns each one.
- One named person accountable for each agent’s permissions and incident response, written into that person’s job profile.
- A training budget line for the first group of employees who will sit the exam in 2027.
I made a related case earlier on telling employees how far agents can act, and the staffing side is its counterpart. HR also tends to analyze AI’s workforce effects before it replans around them, a pattern we described in our piece on workforce replanning. Agent operations is a concrete place to replan, with a role, an owner and a date.
Source: CompTIA, “CompTIA launches effort to define workforce skills for AI agents”
