ISO Relationships, Assurance and Implementation Scope

AI Threat Detection and Mitigation Program

- ISO/IEC 27090 AI Cybersecurity Overview
- Applicability: AI Developers, Operators and Security Teams
- AI Threat Landscape, Exposure and Business Impact
- AI Assets, Model Provenance and Attack-Surface Mapping
- AI Security Controls and Secure-by-Design Practices
- ISO Relationships, Assurance and Implementation Scope
- AI Supply-Chain, Provider and Third-Party Security
- AI Incident Detection, Containment and Recovery
- Security Gap Assessment, Evidence and Remediation
- AI Security Templates, FAQs and Roadmap
- Request an AI Security Assessment

Speak to a GRC expert

If you have any questions or need assistance, please don't hesitate to contact us.

Share on social media

ISO/IEC 27090 and Related Security Standards

AI Security Guidance

27090 provides guidance, not certification criteria.

Extends 27001 Practices

Builds on an established security baseline.

Supports 27002 Controls

Applies controls to AI-specific exposures.

Works with ISO 42001

Complements AI governance and management.

Lifecycle Protection

Addresses AI development, use and updates.

Evidence of Diligence

Supports documented AI security assessments.

Assurance Evidence

Evidence to Support ISO/IEC 27090 Alignment

AI Security Policies, Scope and Threat Models

Datasets, Model Provenance and Version Records

Supplier Assessments and Integration Safeguards

Security Logs and Model Access Monitoring Records

AI Attack Simulations and Incident Response Reports

AI Security Awareness and Testing Records

Implementation Scope

Scope of ISO/IEC 27090 AI Security

Organizations Using AI

Relevant to developers, deployers and users.

Data and Model Pipelines

Protects AI assets throughout their lifecycle.

AI Threat Assessment

Addresses malicious manipulation and misuse.

Hosted AI Services

Covers AI integrations and hosted workloads.

Continue Reading

Ready to learn more about AI Supply-Chain, Provider and Third-Party Security?