ISO 27001 in the Age of AI and IoT

Secure Your Systems in an AI-Driven World

Artificial Intelligence and the Internet of Things have revolutionized how we live and work—but they’ve also transformed the threat landscape. From adversarial attacks on AI models to the massive attack surface created by AI-enabled IoT devices, today’s information security challenges are unlike anything we’ve faced before. Add to that sweeping new regulations like the EU AI Act, Data Act, and Cyber Resilience Act, and organizations worldwide are under pressure to adapt fast.

This book is your roadmap. It reinterprets ISO/IEC 27001:2022—the globally recognized standard for information security management—in light of these emerging technologies and legal frameworks. Whether you’re an implementer, auditor, or compliance professional, you’ll learn how ISO 27001’s clauses and controls align with new regulatory requirements and how they can help you safeguard not just confidentiality, integrity and availability, but also other principles like authenticity and non-repudiation in an era of AI and IoT.

What You Will Learn

• How ISO 27001 supports core security principles across diverse jurisdictions.
• The interplay between ISO 27001 and related standards like ISO 27701 (privacy) and ISO 42001 (AI management).
• Practical guidance for meeting legal obligations while strengthening your security posture.
• Insights into how laws worldwide are responding to AI-driven threats—and what that means for you.
• For ease of reference, this book includes an appendix containing the relevant legal provisions mapped to each chapter’s principles and controls.

Who Should Read This Book?
ISO 27001 implementers in any industry, as well as professionals working with ISO 27701 or ISO 42001. If you’re responsible for information security, privacy, or AI governance, this book will help you navigate complexity with confidence. Lawyers specializing in cybersecurity, privacy, and TMT (technology, media, and telecommunications) and wishing to learn more about how ISO 27001 relates to their work will also find this book useful.