--- title: "ISO/IEC 27090: protecting AI from data to retraining" description: Explore ISO/IEC 27090:2026, a new standard for securing AI systems, addressing risks like data poisoning and model theft, and ensuring robust retraining practices. image: https://blog.isecauditors.com/hubfs/ISO-IEC%2027090%20proteger%20la%20IA%20desde%20los%20datos%20hasta%20el%20reentrenamiento.png --- English - [Spanish](https://blog.isecauditors.com/isoiec-27090-proteger-la-ia-desde-los-datos-hasta-el-reentrenamiento) - [English](https://blog.isecauditors.com/en/iso-iec-27090-protecting-ai-from-data-to-retraining) [![290x123px\_isecauditors](https://blog.isecauditors.com/hs-fs/hubfs/ISEC%20Media/Blog%20Media/290x123px_isecauditors.png?width=290&height=91&name=290x123px_isecauditors.png) ![290x123px\_isecauditors](https://blog.isecauditors.com/hs-fs/hubfs/ISEC%20Media/Blog%20Media/290x123px_isecauditors.png?width=290&height=91&name=290x123px_isecauditors.png)](https://blog.isecauditors.com/?hsLang=en) - [← www.isecauditors.com](https://www.isecauditors.com/) - [academy.isecauditors.com](https://academy.isecauditors.com/) - [← www.isecauditors.com](https://www.isecauditors.com/) - [academy.isecauditors.com](https://academy.isecauditors.com/) [ISO 42001](https://blog.isecauditors.com/en/tag/iso-42001) [Security for AI Ecosystems](https://blog.isecauditors.com/en/tag/security-for-ai-ecosystems) [Implementation of an SGIA](https://blog.isecauditors.com/en/tag/implementation-of-an-sgia) # ISO/IEC 27090: protecting AI from data to retraining [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) Oct 20, 2026, 4:11:21 PM Madrid, 20 October 2026. ISO and IEC have published ISO/IEC 27090:2026, providing guidance on understanding, detecting and mitigating security threats specific to AI systems throughout their life cycle. Published on 14 October, it addresses risks such as data poisoning and model theft, affecting information, system behaviour and intellectual property. \[1–2\] Security must continue after deployment: operational data may feed future updates or retraining. If manipulated, it can introduce vulnerabilities into later versions. The standard complements ISO/IEC 27001 and 27002; its publication provides technical guidance and does not itself create legal obligations. \[1\] At Internet Security Auditors, we recommend identifying the data, models and suppliers in use, verifying their provenance and controlling who can modify them. Organisations should separate development and production environments, protect repositories and retain verifiable versions to investigate changes and restore a known configuration. \[5\] Before incorporating operational data into retraining, we advise checking its integrity and quality, reviewing anomalies and authorising its use through a documented process. We also recommend security testing before deploying each version, access and change logging, and incident containment procedures. At Internet Security Auditors, we turn this approach into an action plan through AI ecosystem security audits and authorised penetration testing, assessing data, models, integrations and controls. We integrate findings into risk management and ISO/IEC 27001 and ISO/IEC 42001 implementation or improvement, with accountable owners, evidence and prioritised actions. EU AI Act compliance is assessed separately according to each organisation’s role and use case. \[6–8\] [![primera-brecha-notificada-aepd\_eng](https://blog.isecauditors.com/hs-fs/hubfs/ISEC%20Media/Blog%20Media/primera-brecha-notificada-aepd_eng.jpg?width=900&height=292&name=primera-brecha-notificada-aepd_eng.jpg)](https://www.isecauditors.com/en/implementation-of-aims-iso-42001) ![iso-iec-27090-security-across-the-ia-life-cycle](https://blog.isecauditors.com/hs-fs/hubfs/ISEC%20Media/Blog%20Media/iso-iec-27090-security-across-the-ia-life-cycle.png?width=856&height=395&name=iso-iec-27090-security-across-the-ia-life-cycle.png) Referencias \[1\] ISO — Public ISO/IEC 27090:2026 record: scope, threats and complementary guidance [https://www.iso.org/standard/27090](https://www.iso.org/standard/27090) \[2\] IEC — Public record: published 14 October 2026, first edition, 56 pages [https://webstore.iec.ch/en/publication/117332](https://webstore.iec.ch/en/publication/117332) \[3\] Secani — Coverage of October 2026 AI standards (19 October 2026) [https://secani.com/blog/ai-governance-standards-2026-iso-27090-en-18286-ieee-2863](https://secani.com/blog/ai-governance-standards-2026-iso-27090-en-18286-ieee-2863) \[4\] MENA Executive Training — ISO/IEC 27090:2026 publication coverage (October 2026) [https://www.menaexecutivetraining.com/post/iso-iec-27090-2026-ai-cybersecurity-standard](https://www.menaexecutivetraining.com/post/iso-iec-27090-2026-ai-cybersecurity-standard) \[5\] OWASP — LLM04:2025 Data and Model Poisoning: prevention guidance [https://genai.owasp.org/llmrisk/llm042025-data-and-model-poisoning/](https://genai.owasp.org/llmrisk/llm042025-data-and-model-poisoning/) \[6\] Internet Security Auditors — AI Compliance Assessment and Support [https://www.isecauditors.com/en/evaluation-and-compliance-support-in-the-use-of-ai](https://www.isecauditors.com/en/evaluation-and-compliance-support-in-the-use-of-ai) \[7\] Internet Security Auditors — ISO/IEC 42001 AI Management System Implementation [https://isecauditors.com/implementacion-sgia-iso-42001](https://isecauditors.com/implementacion-sgia-iso-42001) \[8\] Internet Security Auditors — AI Ecosystem Security Audits [https://isecauditors.com/en/comprehensive-security-audit-for-ai-ecosystems](https://isecauditors.com/en/comprehensive-security-audit-for-ai-ecosystems) Editorial note: this summary uses public records and the cited sources; the full standard has not been reviewed. - [Tweet](https://twitter.com/share) --- ![author-image](https://blog.isecauditors.com/hubfs/Logo_isecauditors_contraccion_HP.png) [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) PCI SSA, PCI QSA, CISSP, CSSLP, ISO 27001 L.A., CSFPC, SFPC Security Consultant Consulting Department --- [Legal Notice](https://www.isecauditors.com/aviso-legal) [Policy Privacy](https://www.isecauditors.com/politica-privacidad) [Cookie Policy](https://www.isecauditors.com/politica-cookies) --- Copyright © 2026 - All rights reserved ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Alberto Villar Arévalo", "url" : "https://blog.isecauditors.com/en/author/alberto-villar" }, "dateModified" : "2026-10-20T14:11:21.741Z", "datePublished" : "2026-10-20T14:11:21.000Z", "headline" : "ISO/IEC 27090: protecting AI from data to retraining", "image" : [ "https://blog.isecauditors.com/hubfs/ISO-IEC%2027090%20proteger%20la%20IA%20desde%20los%20datos%20hasta%20el%20reentrenamiento.png" ], "mainEntityOfPage" : { "@id" : "https://blog.isecauditors.com/en/iso-iec-27090-protecting-ai-from-data-to-retraining", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.isecauditors.com/hubfs/isec_logo.png" }, "name" : "Internet Security Auditors, S.L." } } ```