Definition
ISO/IEC 27090 is an in-progress international standard that catalogs the specific ways AI systems get attacked and the controls organizations should use to defend them — think of it as the AI-specific companion to general cybersecurity standards. It is now at the final draft stage, meaning publication and industry adoption are imminent.
Why it matters
This will likely become the reference checklist auditors and regulators point to when asking 'did you secure your AI systems properly,' so getting ahead of it now reduces future compliance scrambles.