ISO/IEC TR 27563:2023 PDF

Name: ISO/IEC TR 27563:2023 — Security and privacy in artificial intelligence use cases — Best practices
SKU: ISO/IEC TR 27563:2023
Price: 25 EUR
Availability: InStock

Security and privacy in artificial intelligence use cases — Best practices

Название (английский):

ISO/IEC TR 27563:2023

Security and privacy in artificial intelligence use cases — Best practices

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 29
Дата публикации:: 25 мая 2023 г.
Издание:: ISO/IEC TR 27563 edition 1 version 1
ICS:: 35.020

Тип поставки:

Full version435 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:5 раб. дн. (перевод)

Цена:435 €

Описание (английский):

This document outlines best practices on assessing security and privacy in artificial intelligence use cases, covering in particular those published in ISO/IEC TR 24030. The following aspects are addressed: — an overall assessment of security and privacy on the AI system of interest; — security and privacy concerns; — security and privacy risks; — security and privacy controls; — security and privacy assurance; and — security and privacy plans. Security and privacy are treated separately as the analysis of security and the analysis of privacy can differ.

Abstract

Похожие стандарты

Стандарты, упомянутые в описании

Overview

ISO/IEC TR 27563:2023 is a technical report published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). The standard focuses on best practices for assessing security and privacy in artificial intelligence (AI) use cases. It is particularly relevant to organizations deploying or evaluating AI systems, as it provides practical frameworks for identifying, analyzing, and mitigating security and privacy risks in AI applications. This document leverages use cases from ISO/IEC TR 24030 and covers critical areas such as risk assessment, controls, assurance, and planning, with dedicated attention to treating security and privacy as distinct analytical domains.

Key Topics

Overall Assessment: Methods to evaluate the security and privacy of AI systems, tailored to specific use cases.

Security and Privacy Concerns: Identification of concerns that may arise during the deployment and operation of AI, including potential vulnerabilities unique to AI architectures.

Risk Identification: Strategies to pinpoint security and privacy risks, drawing from established frameworks like STRIDE for security and LINDDUN for privacy.

Security and Privacy Controls: Guidance on selecting and implementing technical and organizational measures to mitigate identified risks, referencing standards such as ISO/IEC 27001, ISO/IEC 27701, and ISO/IEC 29151.

Assurance and Planning: Recommendations on building assurance mechanisms and maintaining robust security and privacy plans, emphasizing regular review and continual improvement.

Separate Analysis: Emphasizes conducting distinct analyses for security and privacy, recognizing their different nature in the context of AI systems.

Applications

ISO/IEC TR 27563:2023 is applicable to a wide variety of domains where AI is used, including:

Healthcare: Assessing privacy concerns in patient data used for AI-driven diagnosis or treatment recommendations.

Finance: Protecting sensitive financial data and ensuring compliance with privacy laws in AI-powered analytics and customer service bots.

Manufacturing: Securing intellectual property and operational data in smart manufacturing environments powered by AI.

Transportation: Managing risks around autonomous vehicle data and interactions with external networks.

Public Services: Safeguarding citizen data in AI-based government services and surveillance systems.

By applying the best practices outlined in ISO/IEC TR 27563:2023, organizations can:

Conduct comprehensive security and privacy assessments of their AI systems.

Develop structured plans for risk mitigation, monitoring, and continual improvement.

Align with international compliance requirements and boost stakeholder trust by demonstrating responsible AI implementation.

Utilize templates and frameworks designed for documenting the ecosystem, identifying key stakeholders, and mapping asset impacts.

Related Standards

ISO/IEC TR 27563:2023 operates within a broader framework of international AI, security, and privacy standards, including:

ISO/IEC TR 24030: A reference for AI use cases, providing the foundational scenarios analyzed in this report.

ISO/IEC TR 24028: Addresses trustworthiness in AI, including transparency, explainability, and controllability considerations.

ISO/IEC 27001 & ISO/IEC 27002: Standards for information security management systems and controls.

ISO/IEC 27701: Guidance for privacy information management and requirements for Personally Identifiable Information (PII) controllers and processors.

ISO/IEC 29100: Privacy framework and principles applicable to PII.

ISO/IEC 29134: Privacy impact assessment methodology.

Organizations implementing AI solutions should consider these related standards for a comprehensive approach to AI security and privacy that meets international best practices and fosters trustworthy AI adoption.

ISO/IEC TR 27563:2023 PDF

Abstract

Похожие стандарты

Overview

Key Topics

Applications

Related Standards

Технические детали

ISO/IEC 27001:2022/Amd 1:2024

Information security, cybersecurity and privacy protection — Information security management systems — Requir…

SIST EN ISO/IEC 27701:2025

Information security, cybersecurity and privacy protection - Privacy information management systems - Require…

ISO/IEC 29151:2026

Information security, cybersecurity and privacy protection — Controls, requirements, and guidance for persona…

BS EN ISO/IEC 27017:2021

Information technology. Security techniques. Code of practice for information security controls based on ISO/…

SIST EN ISO/IEC 29100:2020

Information technology - Security techniques - Privacy framework (ISO/IEC 29100:2011, including Amd 1:2018)

SIST EN ISO/IEC 29134:2020

Information technology - Security techniques - Guidelines for privacy impact assessment (ISO/IEC 29134:2017)