Free lab · Practice aid

ISO/IEC 27090 Auditor Interview Simulator

An AI security assessor asks you about ten questions on the ISO/IEC 27090 threat themes: how you decide which AI systems are in scope, what evidence shows your prompt-injection controls work, how you know a supplier's model hasn't changed, and more. Type your answers. Each one is scored on evidence named, owner named, specificity and no overclaiming, with feedback, a model answer and a final report you can download.

A practice aid with transparent keyword scoring, not an assessment. ISO/IEC 27090 is guidance: nobody can be certified to it.

The real job. More noise, a tighter clock.

Interview briefing

Maren Holt, an AI security assessor (fictional), is reviewing how your organisation addresses AI security threats, using ISO/IEC 27090 as the reference. She will ask 10 questions across the threat themes. Answer in writing, as you would out loud: name the evidence, the owner, the dates and results, and do not overclaim.

Rookie: 8 questions. What the assessor is looking for is shown before you answer.
Pro: 10 questions. No hints; feedback and a model answer after each one.
Elite: 10 questions, each followed by a probing follow-up that targets your weakest point.

A practice aid. Answers are scored in your browser with keyword and phrase heuristics, not by a person or an AI model, and are not stored or sent anywhere. The heuristics reward the habits assessors look for; they cannot tell whether what you wrote is true. ISO/IEC 27090 is guidance and cannot be certified against.

TL;DR

What this lab is

5 points

A free practice lab: a fictional AI security assessor asks you about 10 questions on the ISO/IEC 27090 threat themes and the evidence behind your controls.
Examples: "Show me how you decide which AI systems are in scope." "What evidence do you have that prompt-injection controls work?" "How do you know a supplier's model hasn't changed?"
Every answer is scored out of 100 on four criteria: evidence named, owner named, specificity, and no overclaiming (such as "we are certified to 27090").
After each answer you get feedback, what the assessor was looking for and a model answer; at the end, a report you can download as Markdown or CSV.
Rookie shows hints, Pro hides them, Elite adds a probing follow-up after every answer. Scoring is transparent keyword heuristics in your browser: a practice aid, not an assessment.

What a good answer sounds like

Lead with the record. "We test for prompt injection" is a claim. "A regression suite of direct and indirect injection cases runs on every release; the last run is in the pipeline history and the two failures are tickets we closed" is evidence. Assessors sample records, so name one they can open.

Name the owner by role. "The team handles it" leaves the assessor asking who. "The AppSec lead owns the suite and the CISO approves exceptions" answers the next question before it is asked.

Give dates and results, and drop the absolutes. When did it last happen and what did it find? Words like "never", "impossible" and "fully compliant" invite a test you may fail. And never claim an ISO/IEC 27090 certificate: it is guidance. Say what you are certified to (for example ISO/IEC 27001) and how you use 27090. The certification reference explains what can and cannot be certified.

To get the evidence ready before the interview, use the sample artefacts, the traceability matrix and the AI security test plan. For a whole adoption run that ends with an auditor, try the implementation lab.

Frequently asked questions

What does the ISO 27090 auditor interview simulator do?

It rehearses the conversation you have when someone assesses your AI security against ISO/IEC 27090: an internal auditor, a customer's security reviewer, or a certification auditor for ISO/IEC 27001 or 42001 who uses 27090 as a reference. A fictional assessor asks about scope, prompt injection, data poisoning, supplier models, agent permissions, data leakage, output handling, extraction and cost abuse, robustness testing and privacy attacks. You type your answers and get scored feedback and a model answer for each.

How are my answers scored?

In your browser, with transparent rules. Each answer gets up to 25 points on each of four criteria. Evidence: does it name a record the assessor could look at, such as a test log, register, ticket, report or sign-off? Owner: does it name a role, not just "the team"? Specificity: dates, frequencies, numbers and outcomes score; hedges like "we would" or "probably" cost points. No overclaiming: absolute claims such as "cannot be injected" or "fully compliant" cost points, and claiming certification to ISO/IEC 27090 scores zero. The feedback shows which words triggered each score.

Can you be certified to ISO/IEC 27090?

No. ISO/IEC 27090 is guidance on addressing security threats to AI systems, so there is nothing to certify against. Organisations certify their information security management system to ISO/IEC 27001 or their AI management system to ISO/IEC 42001, and use 27090 to shape their AI threat controls. Saying "we are certified to 27090" in an interview tells the assessor you are not sure what you hold, which is why the simulator scores it at zero and, on Elite, challenges it.

Is the scoring a real assessment?

No. It is a practice aid. Keyword and phrase rules reward the habits assessors look for (naming evidence, owners, dates and results, and avoiding absolute claims), but they cannot tell whether what you wrote is true or whether a control is effective. Use the model answers and the "what the assessor was looking for" notes as the real lesson.

Do my answers leave my browser?

No. Answers are scored on the page and are not stored or sent anywhere. Only your lab grade is saved, in your browser and, if you are signed in, to your account so the practice path can count it. You can answer about your own organisation or use the fictional company fact sheet.

Is it free?

Yes. The text interview, the feedback, the model answers and the downloadable report are free.

ISO 27090 toolkit

Explore all AI & ISO standards →

Everything on PlayCISO for ISO/IEC 27090, from the first self-check to the auditor’s questions. ISO/IEC 27090 is guidance, not a certifiable standard.

Self-assessment · Pro