Free short course

ISO 27090 in 10 minutes

ISO/IEC 27090:2026 is guidance on addressing security threats and compromises to AI systems. It names AI-specific threats, maps them to confidentiality, integrity and availability, and helps you treat them inside the ISO/IEC 27001 or 42001 system you already run. It cannot be certified against. Learn the essentials in six 90-second modules, then pass a 10-question check at 80% for a PlayCISO learning badge.

Free, no account needed. The badge is a PlayCISO learning badge, not an ISO certification. PlayCISO is not affiliated with ISO or IEC.

0/6 modules done · module quiz 0/15Final check not taken

Where to go next

Free

ISO 27090 Practice Path

Hands-on AI-security labs grouped by the 27090 threat themes, beginner to advanced.

Pro

ISO 27090 Implementation Lab

Take a fictional company through adoption in five rounds, ending with the auditor.

Hub

AI Standards Toolkit

Every ISO/IEC 27090, 42001 and AI-governance tool in one hub.

A free account includes 3 Pro tool runs.

TL;DR

What this course is

5 points

A free short course on ISO/IEC 27090:2026, the guidance on addressing security threats and compromises to AI systems: six modules of about 90 seconds each, then a 10-question final check.
Modules: what 27090 is, the threat themes, how it fits with ISO/IEC 27001 and 42001, what controls look like, evidence and testing, and certification myths.
Each module is a short read with a simple diagram and 2 or 3 quiz questions with explanations. Progress is saved in this browser.
Score 80% or more on the final check to get a PlayCISO learning badge with an optional name and a shareable card. It is a learning badge, not an ISO certification: ISO/IEC 27090 is guidance and cannot be certified against.
The course summarises themes in our own words and quotes no clause numbers from the standard; the official text is sold by ISO and national standards bodies.

Frequently asked questions

What is "ISO 27090 in 10 minutes"?

A free PlayCISO short course on ISO/IEC 27090:2026. It has six modules of about 90 seconds each: what the standard is, the AI threat themes it covers, how it fits with ISO/IEC 27001 and 42001, what controls look like, evidence and testing, and certification myths. Each module ends with 2 or 3 quiz questions with explanations, and a 10-question final check closes the course.

Do I get an ISO 27090 certificate at the end?

No. Passing the final check at 80% gives you a PlayCISO learning badge and a shareable card. It records that you finished a short course. It is not an ISO certification, because ISO/IEC 27090 is guidance with no certifiable requirements, and PlayCISO is not affiliated with ISO or IEC. The certifiable routes for an organisation are ISO/IEC 27001 and ISO/IEC 42001.

Is the course free?

Yes. The course, the final check and the badge are free and need no account. Some of the follow-on labs linked at the end are Pro and are labelled as such.

How is my progress saved?

Module answers and your best final-check score are kept in your browser's local storage. If storage is blocked, for example in some private windows, the course still works but progress is not kept between visits. The graded final check is also recorded as a lab attempt, which the ISO 27090 practice path and your account can count.

What should I do after the course?

Follow the ISO 27090 practice path to work through hands-on AI-security labs by threat theme, try the ISO 27090 implementation lab to take a fictional company through adoption, and use the AI Standards Toolkit for the ISO/IEC 27090 and 42001 planners, templates and checklists.

ISO 27090 toolkit

Explore all AI & ISO standards →

Everything on PlayCISO for ISO/IEC 27090, from the first self-check to the auditor’s questions. ISO/IEC 27090 is guidance, not a certifiable standard.

Self-assessment · Pro