AI Security

ISO 27090 AI Security Consulting

Truvo puts the AI security guidance of ISO/IEC 27090:2026 to work inside your ISO 27001 ISMS or ISO 42001 AI management system. A senior lead helps your team protect training data, models and AI features against threats such as data poisoning, prompt injection and model theft.

  • Covers the AI systems you build and the AI services you buy
  • Built into your ISO 27001 ISMS or ISO 42001 AIMS
  • Led by a senior CISSP in the US or Canada

For most SMBs, ISO 27090 consulting costs USD $2,500 to $5,000 a month to build and operate the program.

Talk to an AI security consultant

Share the AI systems in scope and your timeline, and a consultant will follow up to book a call.

What does ISO 27090 implementation involve?

Truvo follows the Assess, Build, Operate model, with ISO 27090 guidance built into the management system you already have.

Frame (8)

Assess: AI System Inventory and Threat Assessment

  • What We Do

    We list the AI systems you develop or use, including third-party models and AI services, trace where their training data and models come from, and assess each system against the threats ISO/IEC 27090:2026 describes, such as data poisoning, model exfiltration, evasion and prompt injection.

  • What You Get

  • AI System Inventory:
    Each AI system in scope with its owner, data sources, model source and the suppliers behind it.

  • AI Threat Assessment:
    The ISO 27090 threats that apply to each system, rated by likelihood and impact, with the gaps in your current safeguards.

Frame (9)

Build: AI Security in Your Risk Treatment Plan

  • What We Do

    We add AI-specific safeguards to your ISO 27001 risk treatment plan and Statement of Applicability, or to your ISO 42001 AI risk treatment, so AI security lives in the same management system as your other controls.

  • What You Get

  • Updated Risk Treatment Plan:
    AI threats added to your risk register, each with a treatment, an owner and a target date.

  • AI Security Policy and Procedures:
    Rules for training data, model access, AI supplier selection and model updates, written for how your team builds and buys AI.

Frame (10)

Build: Safeguards in Operation

  • What We Do

    We help your engineers put safeguards into daily use, such as training data provenance checks, access controls and limits on model use, detection of malicious inputs, protected development environments and secure model update steps.

  • What You Get

  • Safeguard Map:
    Each safeguard tied to the threat it addresses and the AI system it protects.

  • Evidence Set:
    Records that show each safeguard working, collected while your team operates it.

Frame (11)

Operate: Monitoring and Incident Response

  • What We Do

    We set up logging and monitoring for your AI systems, define how your team spots suspicious use such as repeated queries aimed at extracting a model, and add AI incidents to your incident response plan.

  • What You Get

  • AI Monitoring Plan:
    What is logged for each AI system, who reviews it and what triggers a response.

  • AI Incident Playbooks:
    Response steps for suspected data poisoning, model extraction and prompt injection.

Frame (12)

Operate: Model Updates and Management Review

  • What We Do

    We review safeguards with your team each time a model is retrained, updated or replaced, because data collected in operation can become training data. We also prepare AI security input for your management review.

  • What You Get

  • Model Change Checklist:
    Security checks your team completes before a retrained or updated model goes live.

  • Management Review Input:
    AI threat changes, monitoring results and open actions, formatted for leadership sign-off.

What do you get from an ISO 27090 engagement?

Four things you hold at the end, ready for customer security reviews.

An AI system inventory and threat assessment

Every AI system you build or buy, with the ISO 27090 threats that apply and how your team treats each one.

AI safeguards with evidence

Safeguards your team operates day to day, from training data checks to limits on model use, with records that show them working.

AI monitoring and incident playbooks

Logging, detection and response steps for suspicious model use, data poisoning and prompt injection.

One management system

AI security built into your ISO 27001 ISMS or ISO 42001 AIMS, with input ready for management review.

When is Truvo the right call?

For many companies, the trigger is an enterprise customer security review that asks how AI features, models and training data are protected.

Right call when

  • You build AI features or models into your product and customers ask how you secure them

  • You hold ISO 27001 or ISO 42001 and want AI security inside the same management system

  • You use third-party models or AI services and want a clear view of the risk they bring

  • Your team is new to AI threats such as data poisoning and prompt injection

  • Your team prefers to focus on the product while a senior lead builds the program

Wrong call when

  • You need the lowest possible price. Our pricing is competitive, but every engagement is led by experienced practitioners, goes through several rounds of QA and ends in detailed deliverables, so we are rarely the cheapest option

What do clients say about Truvo's ISO work?

"Truvo Cyber conducted our ISO 27001 and ISO 27701 internal audit. They were easy to work with, communicated clearly throughout the project, and delivered a thorough, professional report on time. I would recommend them to any organization working through similar compliance requirements."

Ellipse (1) (1)
Aimee Halbert

UserTesting

"Truvo is an instrumental and integrated part of our team...
They don’t just provide recommendations; they ensure we meet our stringent ISO 27001 and SWIFT compliance goals. We trust them with projects of national importance, and they deliver."

Mask Group-1
Matt Charette

CISO, Payments Canada

Ready to plan your ISO 27090 AI security program?

Book a strategy call. We review your AI systems, your ISO 27001 or ISO 42001 status and your timeline, and give you a clear picture of the scope and investment.

Book Your Free ISO Strategy Session

What do companies ask about ISO 27090?

For most SMBs, ISO 27090 consulting costs USD $2,500 to $5,000 a month to build and operate the program. The monthly fee depends on the number of AI systems in scope, whether you build models or use third-party AI services, and whether an ISO 27001 ISMS or ISO 42001 AIMS is already in place.

ISO/IEC 27090:2026 is an international standard from ISO/IEC JTC 1/SC 27, published in October 2026. It gives guidance on understanding, detecting and mitigating security threats specific to AI systems throughout their life cycle, from training data to models, including threats such as data poisoning and model theft.

ISO describes ISO 27090 as security guidance with no requirements for a management system, so organizations apply it within a certifiable management system such as ISO 27001 or ISO 42001. An independent assessment against ISO 27090 gives customers an outside view of your AI security.

ISO/IEC 42001 sets requirements for an AI management system, covering how an organization manages its responsibilities, risks and opportunities relating to AI. ISO 27090 focuses on security threats to AI systems and ways to address them. Many companies use ISO 42001 for AI governance and ISO 27090 to guide the security safeguards inside it.

ISO 27090 complements ISO/IEC 27001 and ISO/IEC 27002 by addressing threats specific to AI systems. ISO 27001 sets the requirements for the information security management system, and ISO 27090 adds detail on the AI data, models and workflows that need extra protection. Truvo builds the ISO 27090 safeguards into your ISO 27001 risk treatment plan.

ISO's guide to the standard lists data poisoning, model exfiltration, evasion attacks, membership inference, model inversion, direct model poisoning, prompt injection, sensitive model output and outputs that contain injection attacks. It also covers threat modelling, red teaming, supply chain security and the security of model updates and retraining.

Yes. ISO describes the standard as intended for organizations of all sizes that develop or use AI, and its suggested first steps include identifying AI systems supplied by third parties. For companies that buy AI, the work typically centers on supplier selection, the data shared with each service, access to the service and monitoring of its use.

Yes, as a separate engagement with a different team, so the assessors stay independent of the program. See our ISO 27090 AI security assessment page.

Client data, documentation and sensitive materials are stored in secure North American cloud environments. Every engagement is led by a senior CISSP in the US or Canada with 10+ years in security, and every consultant on the engagement is an experienced, vetted professional.

How is Truvo different?

Our consultants build and operate management systems, so AI security fits how your team builds and operates AI.

The Template Approach

  • Generic AI Policies:
    Policy templates describe a generic AI system. Customers ask how your team protects your models and your data.

  • Separate AI Programs:
    AI security documented apart from the ISMS means a second risk register and duplicate evidence.

  • Threats Left Unnamed:
    Safeguards chosen before a threat assessment are hard to explain in a customer security review.

The Truvo Approach

  • One Management System:
    ISO 27090 safeguards extend your ISO 27001 or ISO 42001 risk treatment, policies and evidence.

  • Safeguards Tied to Your AI Systems:
    Each safeguard maps to a named threat and to the AI system it protects.

  • Senior, Practitioner-Led:
    Every engagement is led by a senior CISSP in the US or Canada who builds and operates management systems.

Ready to secure your AI systems?

ISO 27090 AI security consulting led by practitioners who build and operate management systems.

Book a Strategy Call

From the blog: AI security and governance

Researchers examining a robotic arm, showcasing technology and innovation, illustrating Top ISO 42001 Consultants in Canada (2026): A Buyer's Guide

Top ISO 42001 Consultants in Canada (2026): A Buyer's Guide

Truvo Cyber is a Canadian cybersecurity firm that implements ISO/IEC 42001, the AI management system standard, for SaaS and technology companies ...

Learn More
ISO 42001 Cost in 2026: The 4 Factors

ISO 42001 Cost in 2026: The 4 Factors

ISO 42001 implementation and certification for small organization can land anywhere between roughly US$20,000 and US$55,000 for a first ...

Learn More
An animated infographic titled "AI Governance Crosswalk." A Venn diagram connects Risk Management (ISO 42001), Management System (NIST AI RMF), and Legal Compliance (EU AI ACT) to a central "Shared Core." A man points, and text at the bottom reads "Build Once, Comply With All Three."

ISO 42001, NIST AI RMF, and the EU AI Act: The Complete Control Crosswalk

ISO 42001, the NIST AI RMF, and the EU AI Act overlap on roughly two-thirds of their controls. Design one control set against that shared core and ...

Learn More