Verify Integrity of AI Models, Structures, and Weights
Ensure AI models are genuine and have not been tampered with to maintain trustworthiness.
Plain language
This control is about making sure that the AI models you're using are what you think they are. If someone changes them without you knowing, it could lead to wrong decisions or security breaches.
Framework
ASD Information Security Manual (ISM)
Control effect
Detective
Classifications
NC, OS, P, S, TS
ISM last updated
Dec 2025
Control Stack last updated
18 June 2026
E8 maturity levels
N/A
Guideline
Guidelines for software developmentOfficial control statement
The source and integrity of AI models, structures and weights are verified.
Why it matters
If AI models are tampered with, it can lead to wrong decisions which might harm your business financially or reputationally.
Operational notes
Regularly verify AI models to ensure they haven't been altered. Keep reports and logs updated for any checks and changes made.
Implementation tips
- The IT team should keep a list of all AI models currently in use. Write down the source, version, and last updated date for each model to track its authenticity.
- System owners should regularly check these AI models for any unauthorised alterations. Use a tool that compares the current version of the model with prior, verified versions.
- Procurement managers need to ensure that any new AI models come from trusted vendors. This can be done by evaluating the vendor's reputation and security credentials before purchase.
- Data scientists should document the structure and weights of each AI model they develop. This involves creating a report that captures its key characteristics and how it was trained.
- Managers should organise training sessions for staff to understand the importance of verifying AI model integrity. Include real-life examples where tampered models led to business issues.
Audit / evidence tips
- Aska list of all AI models in use: Request a database or document listing each model, its source, and its current versionLook atwhether these details match with procurement recordsGoodConsistent records across systems indicating careful tracking
- Askevidence of regular integrity checks on AI models: Request the logs or reports from recent verification activitiesLook atentries that confirm the model's structure and weights were checked for unauthorised changesGoodRecent and detailed logs showing checks were conducted methodically
- Askto see vendor evaluation records for AI models: Request past assessments or vendor reviews before any purchases were made. Look to see if the vendor's security practices and track record were consideredGoodA detailed evaluation process document showcasing informed decision-making
- Askdocumentation on AI model training and development: Request detailed reports from data scientists about how each model was builtLook atspecifics like algorithms used, dataset descriptions, and version historyGoodClear and comprehensive reports that explain model development
- Asktraining session records: Request attendance lists and session content from staff training events about AI model integrityLook atthe materials used and if they cover verifying integrity effectivelyGoodDocumented evidence of training with well-explained objectives and examples
Cross-framework mappings
How ISM-2086 relates to controls across ISO/IEC 27001, ISO/IEC 42001, Essential Eight, and ASD ISM.
ISO 27001
| Control | Notes | Details |
|---|---|---|
handshakeSupports(2)expand_less | ||
| Annex A 5.21 | ISM-2086 requires that AI model source and integrity are verified to prevent unauthorised or malicious model substitution and tampering | |
| Annex A 8.30 | ISM-2086 requires that the source and integrity of AI models (including structures and weights) are verified to ensure they are authentic... | |
These mappings show relationships between controls across frameworks. They do not imply full equivalence or certification.
Related ASD ISM controls in Software development
See all Guidelines for software development controls, or browse the full ASD ISM library.