ISO/IEC 27090 AI Security Test Plan Generator
Generate a security test plan for an AI system, organised by AI threat area — prompt injection, poisoning, evasion, extraction, membership inference, supply chain, output handling, excessive agency, resource abuse and data leakage — with methods, pass criteria and a findings log.
Template & sample only — a structured starting point with sample content, not legal, audit, certification or investment advice. Subscribers customise it with their own details and generate the document for their own work.
What this template gives you
- ISO/IEC 27090 gives guidance on security threats specific to AI systems; this template turns those threat areas into concrete, testable cases.
- Thirty test cases across ten threat areas, each with a method and explicit pass criteria; critical tests are weighted as material.
- Record Not run, Passed, Passed with findings, Failed or Not applicable, and log findings with severity, owner and status.
- The summary shows execution progress, open findings by severity and an indicative release recommendation.
Frequently asked questions
How is AI security testing different from a normal penetration test?
A conventional test targets infrastructure and application flaws. AI systems add attack surface in the model and its data: instructions hidden in retrieved content, poisoned training data, crafted inputs that evade classifiers, queries that extract the model or its training data, and agents that can be talked into misusing their tools.
Does this reproduce ISO/IEC 27090?
No. Threat areas and test cases are described in our own words, with no clause numbers. Use your own copy of the standard alongside it, and obtain authorisation before testing any system.
Is this a finished document I can rely on?
No. Every tool in this suite is a template with sample content. It gives you a structured, editable starting point and generates a document from your own answers, but it is not legal, audit, certification, investment or professional advice. Review and adapt the output, and have it checked by the appropriate specialist before you rely on it.
Who can use it?
The page and sample are public. Customising the template with your own details and exporting the generated document (Word, PDF, Markdown, CSV) is part of any PlayCISO paid plan. Your work is saved in your own browser.
More free security tools
The tools people use most on PlayCISO.
Catch injected instructions hiding in content your AI agent should only read.
Score your readiness against the first international standard for AI security threats.
Critical CVEs across 21 major vendors, month by month — and what the 2026 surge means.
Build an ordered ruleset, replay labelled packets and catch shadowed and any-to-any rules.
Self-assess all six Functions, from Govern to Recover, and see your weakest one.
Search 172 threat actors across Microsoft, CrowdStrike, Mandiant and community names.