AI adoption is outrunning AI security In many organizations, nobody ever formally decided to adopt AI. It simply arrived: a chatbot on the website, an assistant in the mail client, a summary button in...

Nach vier Jahren liegt die Norm ISO/IEC 27090 vor. Der Leitfaden beschreibt KI-spezifische Angriffe samt Gegenmaßnahmen und ergänzt ISO 27001.

Introduction: The impending release of ISO/IEC 27090 in mid-2026 marks a pivotal shift from theoretical AI ethics to a practical, security-first framework. This long-awaited standard moves beyond philosophical principles to address how AI systems actually fail, providing organizations with a concrete blueprint for mitigating tangible risks like model hallucinations, data poisoning, and supply chain vulnerabilities. For CISOs and DevOps teams, it transforms AI governance from an academic exercise into an actionable set of technical controls.