PD ISO/IEC TR 27563:2023 - Page 2

Security and privacy in artificial intelligence use cases. Best practices. | Status: Current

1 Scope This document outlines best practices on assessing security and privacy in artificial intelligence use cases, covering in particular those published in ISO/IEC TR 24030. The following aspects are addressed:

• — an overall assessment of security and privacy on the AI system of interest;
• — security and privacy concerns;
• — security and privacy risks;
• — security and privacy controls;
• — security and privacy assurance; and
• — security and privacy plans.

Security and privacy are treated separately as the analysis of security and the analysis of privacy can differ.