ISO/IEC TR 27563:2023

This document outlines best practices on assessing security and privacy in artificial intelligence use cases, covering in particular those published in ISO/IEC TR 24030.

The following aspects are addressed:

—    an overall assessment of security and privacy on the AI system of interest;

—    security and privacy concerns;

—    security and privacy risks;

—    security and privacy controls;

—    security and privacy assurance; and

—    security and privacy plans.

Security and privacy are treated separately as the analysis of security and the analysis of privacy can differ.

To comply with a standard, you need to quickly understand its issues in order to determine its impact on your activity.

The Requirements department helps you quickly locate within the normative text:

• mandatory clauses to satisfy,
• non-essential but useful clauses to know, such as permissions and recommendations.

The identification of these types of clauses is based on the document "ISO/IEC Directives, Part 2 - Principles and rules of structure and drafting of ISO documents" as well as on a constantly enriched list of verbal forms.

With Requirements, quickly access the main part of the normative text!