ISO/IEC 27090:2026-AI Security Protection Assessment & Approval Now Available from ACS Canada
ISO/IEC 27090:2026: A New International Focus on AI Security
Published in 2026, ISO/IEC 27090:2026 provides international guidance for understanding, detecting and mitigating security threats and compromises that specifically affect artificial intelligence systems.
As organizations increasingly develop, deploy and rely on artificial intelligence, conventional cybersecurity controls alone may not address every AI-specific threat. AI systems introduce additional security challenges involving training data, AI models, system inputs, model updates, development environments, operational systems and intellectual property.
ACS Canada Certification™ provides independent
AI Security Protection Assessment & Approval
services aligned with the guidance of ISO/IEC 27090:2026.
Why AI Security Requires Special Attention
Artificial intelligence systems may face specialized security threats that can directly affect their data, behaviour, reliability, availability and intellectual property.
Data Poisoning
Manipulation or contamination of AI training or operational data.
Model Theft
Unauthorized extraction, duplication or theft of AI models and intellectual property.
Malicious Inputs
Inputs or prompts designed to manipulate AI behaviour or expose system weaknesses.
AI System Compromise
Unauthorized manipulation, exploitation or compromise of AI systems.
What ACS Canada Can Do for Your Organization
ACS Canada Certification™ provides independent
AI Security Protection Assessment & Approval
services for organizations developing, deploying, operating or using artificial intelligence systems.
Our Assessment May Include
– AI security governance and organizational responsibilities
– Identification of AI systems, models, data and critical AI assets
– Protection of AI training data and operational data
– AI model security and intellectual property protection
– Data poisoning risks and preventive controls
– Model theft, extraction and exfiltration risks
– Prompt injection and malicious input risks
– AI-specific security vulnerability assessment
– Security of AI development and deployment environments
– Access control and authorization mechanisms
– AI security monitoring, logging and threat detection
– Incident response and AI security compromise management
– Protection during AI model updates and retraining
– Review of AI security policies, procedures, records and supporting evidence
– Evaluation of mitigation measures and security controls
– Continual improvement of AI security practices
Independent ACS Canada Approval
Following successful completion of the assessment and satisfactory review of applicable controls, documentation, technical safeguards and supporting evidence, an organization may receive:
ACS CANADA – AI SECURITY PROTECTION APPROVAL
The approval can help demonstrate an organization’s commitment to protecting its AI systems, models, data and related assets against emerging AI-specific security threats and compromises.
Benefits for Your Organization
Strengthen AI Security
Identify weaknesses and strengthen controls before vulnerabilities develop into serious security incidents.
Protect Valuable AI Assets
Improve protection of AI models, training data, operational information and intellectual property.
Increase Stakeholder Confidence
Demonstrate that AI security controls and practices have been independently assessed.
Combine AI Security Protection with ISO/IEC 27001
ACS Canada recommends organizations consider combining the
ISO/IEC 27090:2026 AI Security Protection Assessment
with
ISO/IEC 27001 Information Security Management System certification.
This approach can strengthen information security governance, cybersecurity controls, AI asset protection, incident response, risk management, documentation management and organizational resilience.
Who Should Consider an AI Security Protection Assessment?
– Artificial Intelligence developers
– Generative AI solution providers
– Machine Learning solution providers
– Software development organizations
– Cloud and technology service providers
– Financial institutions and FinTech companies
– Healthcare technology providers
– Cybersecurity organizations
– Telecommunications companies
– Manufacturing and industrial technology organizations
– Government and public sector organizations
– Organizations integrating AI into critical business processes
Why Choose ACS Canada?
– Independent and professional assessment approach
– Experienced auditors and technical assessors
– Practical understanding of information security, cybersecurity and AI-related risks
– Assessment of organizational controls, documentation and supporting evidence
– Integration with existing information security and management systems
– Support for customer confidence and stakeholder assurance
– Assessment services available to organizations across Canada and internationally
Protect Your AI Before It Becomes a Target
If your organization develops, operates or relies on artificial intelligence, ACS Canada can independently evaluate AI security threats, review existing controls and help strengthen your AI Security Protection program.
AI SECURITY PROTECTION ASSESSMENT & APPROVAL
