ISO/IEC 27090:2026

Cybersecurity — Artificial intelligence (AI) — Addressing security threats and compromises to AI systems ISO/IEC 27090:2026

Publication date:   Oct 14, 2026

Scope

This document addresses security threats and compromises specific to artificial intelligence (AI) systems. This document aims to provide information to organizations to help them better understand the consequences of security threats specific to AI systems, throughout their life cycle, and descriptions of how to detect and mitigate such threats.
This document is applicable to all types and sizes of organizations, including public and private companies, government entities and not-for-profit organizations that develop or use AI systems.