ISO/IEC AWI 26160

Information security, cybersecurity and privacy protection — Enhancing the ISO/IEC 15408 series and ISO/IEC 18045 for the Evaluation of Artificial Intelligence (AI) Functionality

General information

20.00   New project registered in TC/SC work programme   Feb 3, 2026

ISO/IEC

ISO/IEC JTC 1/SC 27 Information security, cybersecurity and privacy protection

International Standard

Scope

This document provides:
• AI-specific application notes for relevant security assurance requirements (SARs) from ISO/IEC 15408-3 (CC Part 3), and
• AI-specific application notes for relevant work units (WUs) from ISO/IEC 18045 (CEM) presented as defined in ISO/IEC 15408-4 (CC Part 4).

The document also considers AI-specific security functional requirements (SFRs) in an extended security functional requirement class for AI (based on ISO/IEC 15408-3 (CC Part 2)).

Life cycle

NOW

IN_DEVELOPMENT
ISO/IEC AWI 26160
20.00 New project registered in TC/SC work programme
Feb 3, 2026