Release
The ISO/IEC 27090:2026 standard gives security teams a new framework for assessing AI systems.
Published on 14 October 2026, the first edition has 56 pages and was developed by ISO/IEC JTC 1/SC 27.
The text covers attacks on data, models and the software around them.
Clause 5.3 explicitly extends zero trust to agent operations.
No new certification badge is created by this standard, which remains an implementation guide.