As organizations integrate artificial intelligence into their products, services, and internal operations, securing the systems behind these technologies is becoming an increasingly important part of cybersecurity. To help businesses address emerging AI-specific threats, Rhymetec is expanding its security advisory services with ISO/IEC 27090 readiness support.

Published in October 2026, ISO/IEC 27090 provides guidance for identifying, detecting, and mitigating security threats and compromises affecting AI systems. The international standard addresses risks such as data poisoning, model theft, prompt injection, information exposure, and vulnerabilities that can emerge throughout the AI system life cycle.

Unlike traditional information security standards that address broader organizational security practices, ISO 27090 focuses specifically on the technical and operational threats introduced by AI. It gives organizations a structured reference for understanding how AI systems can be compromised and where additional safeguards may be needed.

Through its ISO 27090 readiness services, Rhymetec helps organizations assess AI-related security risks, identify gaps in existing controls, and develop practical strategies for protecting AI systems. The offering builds on Rhymetec's experience across information security, risk management, and AI security, helping businesses incorporate AI-specific safeguards into their broader cybersecurity programs.

Addressing the security challenges of AI

AI systems introduce security considerations that extend beyond traditional software and infrastructure. From the integrity of training data to the behavior of deployed models, organizations must consider how attackers could manipulate, extract, or compromise the systems they develop and use.

ISO 27090 addresses these challenges by bringing AI-specific threat considerations into the broader practice of information security. Its guidance helps organizations examine potential attack paths, evaluate existing safeguards, and determine appropriate approaches to detection, mitigation, and ongoing oversight.

Rhymetec's ISO 27090 readiness services help organizations:

• Assess AI systems, supporting infrastructure, data sources, and third-party dependencies.
• Identify security gaps associated with AI-specific threats and vulnerabilities.
• Prioritize risks based on AI use cases, exposure, and business objectives.
• Develop and implement security controls, policies, and procedures.
• Evaluate safeguards through security assessments and targeted testing.
• Establish ongoing security management practices as AI systems and threats evolve.

Connecting AI security with established frameworks

ISO 27090 represents an important addition to the growing landscape of AI security and governance standards. However, organizations do not need to approach AI security as an entirely separate initiative.

The standard complements established frameworks such as ISO/IEC 27001 and ISO/IEC 42001, each of which addresses a different aspect of organizational security and AI management.

ISO 27001 provides a foundation for managing information security risks across an organization, while ISO 42001 establishes requirements for an AI management system. ISO 27090 builds on these areas with guidance focused specifically on threats and compromises affecting AI systems.

Together, these standards offer complementary perspectives on protecting information, managing AI-related responsibilities, and addressing the security risks associated with AI technologies.

By helping organizations connect AI-specific security considerations with existing controls and risk management practices, Rhymetec supports a more integrated approach to cybersecurity as businesses continue to adopt AI.

Building on Rhymetec's AI security expertise

The introduction of ISO 27090 readiness support expands Rhymetec's growing portfolio of AI security services, which includes ISO/IEC 42001 readiness, AI governance consulting, AI risk assessments, and AI penetration testing.

Through its combination of cybersecurity advisory, compliance expertise, and offensive security capabilities, Rhymetec helps organizations address AI risks from multiple perspectives. This includes strengthening governance practices, evaluating technical vulnerabilities, and implementing safeguards that reflect how AI systems are developed, deployed, and used.

As AI adoption continues to evolve, organizations need security strategies that account for both established cybersecurity risks and the threats unique to intelligent systems. ISO 27090 provides another resource for navigating this landscape, and Rhymetec is helping businesses turn its guidance into actionable security practices.

Organizations interested in ISO 27090 readiness can learn more about Rhymetec's AI security services or contact our team to discuss their AI security priorities.