# A.11 Security

AI-related objective: The AI system, its data and models are protected against AI-specific threats such as data poisoning, adversarial input, model extraction and inference attacks, as well as conventional threats. Used when establishing risk criteria (6.3.4), identifying consequences (6.4.2.6) and evaluating risk (6.4.4). Read security against the objective the use threatens most.

- Framework: ISO/IEC 23894:2023
- Cited to: ISO/IEC 23894:2023, clause A.11
- Source: https://www.iso.org/standard/77304.html
- Last updated: 2026-10-20

## What it asks

AI-related objective: The AI system, its data and models are protected against AI-specific threats such as data poisoning, adversarial input, model extraction and inference attacks, as well as conventional threats. Used when establishing risk criteria (6.3.4), identifying consequences (6.4.2.6) and evaluating risk (6.4.4).

## Where generative AI changes the answer

Security for generative AI has to cover the prompt as an attack surface and the tool integration as a path out of the system.

## Who it binds

The AI risk owner, with the objective owner named in the risk treatment plan.

## Evidence an auditor samples

- AI-specific threat assessment and security controls

## The test you can run

Ask which objective the use threatens most and what measure shows it. A blank answer is the finding.

## Common failures

- Threat model limited to conventional application security

## Before the draft publishes

Pick the two objectives the use most affects, write the test you would apply, and record the result before the draft is published.

## What this page does not say

It does not state the text of ISO/IEC DTS 25568, because ISO has not published the draft's clause text. It does not certify anything.

Not legal advice; does not certify.