ISO 27090 Sample Artefacts & Templates
An ISO/IEC 27090 adoption produces seven core documents: a scope statement, an AI asset and threat register, a risk treatment plan, an AI security policy, a RACI, a testing evidence log and a management review agenda. Here is each one filled in for a fictional company, plus a blank version to start your own.
Template & sample only. Harbourline Freight Ltd (harbourline.example) is fictional. Not legal, audit or certification advice; ISO/IEC 27090 is guidance and cannot be certified.
- 1. AI security scope statementSays which AI systems the AI security programme covers, where the boundaries and interfaces are, and why anything is left out.
- 2. AI asset and threat registerLists each AI asset with the AI-specific threats that apply, the CIA property each threat hits, a rating and an owner, so they can go into the risk register.
- 3. Risk treatment plan excerptRecords the decision for each AI threat (treat, accept, avoid or transfer), the controls chosen, where they map in ISO/IEC 27001 or 42001, the residual risk and who signed it off.
- 4. AI security policyA short, approved policy that sets the rules every AI system in scope must follow, who owns them and how exceptions work.
- 5. AI security RACIShows who is responsible, accountable, consulted and informed for each recurring AI security activity, so nothing has two owners or none.
- 6. Testing evidence logOne row per test run, with what was tested, how, the result, where the evidence is and the retest, so an auditor can sample it.
- 7. Management review agendaThe agenda for the leadership meeting that looks at AI security results, decides what changes and records the actions.
Phase: Scope and inventory
Says which AI systems the AI security programme covers, where the boundaries and interfaces are, and why anything is left out.
Harbourline Freight Ltd: AI security scope statement
Sample for a fictional organisation (Harbourline Freight Ltd, harbourline.example). All names, systems and figures are invented for illustration.
Purpose
This statement defines the scope of Harbourline Freight Ltd's AI security programme, which applies ISO/IEC 27090 guidance on addressing security threats and compromises to AI systems. The programme sits inside the existing ISO/IEC 27001 information security management system (ISMS). ISO/IEC 27090 is guidance; this scope does not claim certification against it.
AI systems in scope
| AI system | Type | Our role | Owner | Why in scope |
|---|---|---|---|---|
| Dispatch Copilot | LLM assistant with tools (hosted model via vendor API, retrieval over route and customer data) | Deployer | Head of Operations | Can create and change bookings; reads customer data |
| ETA Predictor | Gradient-boosted model trained in-house on telematics | Provider and deployer | Data Science Lead | Customer-facing delivery promises; trained on our data |
| Invoice Extractor | Document AI feature embedded in the finance SaaS platform | Deployer | Finance Systems Manager | Processes supplier bank details |
Boundaries and interfaces
- Includes model APIs, prompts and system instructions, retrieval indexes, tool integrations, training pipelines, model artefacts and the logs they produce.
- Interfaces: booking platform API (Dispatch Copilot tools), telematics data lake (ETA Predictor training), finance SaaS tenant (Invoice Extractor).
- Locations: production in the eu-west cloud region; development and staging tenants are in scope for poisoning and artefact access.
Exclusions and justification
| Excluded | Justification | Compensating control |
|---|---|---|
| General-purpose chat assistant used by staff | Covered by the acceptable-use policy; no integration with company systems | Approved-tools list; data-loss prevention on uploads |
| Vendor model training infrastructure | Outside our control | Supplier due-diligence questionnaire and contract terms |
Approval
Approved by the Chief Operating Officer (executive sponsor) on 2026-11-16. Review annually and whenever a new AI system, model provider or data source is introduced.
Template and sample only: not legal, audit or certification advice. ISO/IEC 27090 is guidance and cannot be certified.
Loading…
ISO 27090 toolkit
Explore all AI & ISO standards →Everything on PlayCISO for ISO/IEC 27090, from the first self-check to the auditor’s questions. ISO/IEC 27090 is guidance, not a certifiable standard.
ISO 27090 Readiness Checklist
Reference · GuideCan you be certified to ISO 27090?
Planner · ProISO 27090 Project Plan
Roadmap · ProISO 27090 Maturity Timeline
Lab · ProISO 27090 Implementation Lab
Lab · ProISO 27090 Threat-Mapping Lab
Template · ProISO 27090 AI Security Test Plan
Template · ProISO 27090 RACI Template
Template · ProISO 27090 Project Plan Template
Matrix · FreeISO 27090 Traceability Matrix
Generator · FreeISO 27090 Alignment Statement
Labs · FreeISO 27090 Practice Path
Matrix · FreeAI Shared-Responsibility Matrix
Briefing · FreeAI Security Board Briefing Pack
Metrics · FreeAI Security Metrics Set
Estimator · FreeISO 27090 Cost Estimator
Calendar · FreeAI Security Review Calendar
Course · FreeISO 27090 in 10 Minutes
Simulator · FreeISO 27090 Auditor Interview
Article · GuideISO 27090 explained
TL;DRWhat you get
4 points
- Seven documents an ISO/IEC 27090 adoption produces: an AI security scope statement, an AI asset and threat register, a risk treatment plan excerpt, an AI security policy, a RACI, a testing evidence log and a management review agenda.
- Each comes as a filled-in sample for a fictional company, Harbourline Freight Ltd (harbourline.example), so you can see what good looks like, and as a blank template to start your own.
- Export to Markdown or CSV, copy, or print to PDF. Nothing is uploaded.
- Standards are described in our own words, with no clause numbers. ISO/IEC 27090 is guidance; these artefacts support your ISO/IEC 27001 or 42001 work, they do not certify anything.
Frequently asked questions
What documents do I need for ISO/IEC 27090?
ISO/IEC 27090 is guidance, so it does not mandate a document set the way a certifiable standard does. In practice an adoption produces a scope statement for AI security, an inventory of AI assets with their threats, risk treatment decisions, an AI security policy, a RACI, test evidence and management review records. Those are also what an ISO/IEC 27001 or 42001 auditor will want to see when AI is in scope.
Is the sample organisation real?
No. Harbourline Freight Ltd and harbourline.example are fictional, and every person, system and figure in the samples is invented for illustration. The .example domain is reserved for documentation, so it can never belong to a real company.
Can I use these for an ISO 42001 or 27001 audit?
They are a starting point. Tailor them to your organisation, link them to your existing ISMS or AIMS records, and keep them current. A certification body audits your management system against ISO/IEC 27001 or 42001; it will not certify against ISO/IEC 27090, because 27090 is guidance.
Who can use the templates?
The page and the list of artefacts are public. Opening the samples and blank templates and exporting them is a Pro feature: a free account gets 3 free tool runs, shared across every tool, and after that it needs Pro, $5/month or $40/year.
More security tools
The tools people use most on PlayCISO.
Catch injected instructions hiding in content your AI agent should only read.
Score your readiness against the first international standard for AI security threats.
Critical CVEs across 21 major vendors, month by month — and what the 2026 surge means.
Build an ordered ruleset, replay labelled packets and catch shadowed and any-to-any rules.
Self-assess all six Functions, from Govern to Recover, and see your weakest one.
Search 172 threat actors across Microsoft, CrowdStrike, Mandiant and community names.