The UK government has introduced a pioneering cyber security code of practice focused on artificial intelligence (AI) for businesses in the country. This initiative is described as a “world first” by the Department for Science, Innovation and Technology.
The aim of this standard is to safeguard AI systems from cyber attacks, enhance productivity, and establish a global coalition to address the shortage of cyber skills worldwide. This move is part of the government’s ongoing efforts to promote AI as a driver of economic growth, echoing similar sentiments expressed by previous administrations.
The Code of Practice for the Cyber Security of AI is intended to set a global standard within the European Telecommunication Standards Institute (ETSI) by defining baseline security requirements. Unique security risks associated with AI, such as data poisoning and model obfuscation, necessitate specific standards tailored to AI systems, as highlighted by DSIT.
This code aligns with the government’s broader strategy for change, which includes prioritizing economic growth and implementing an AI opportunities action plan. The goal is to position the UK alongside countries like France, which has outlined recommendations for developing an AI-driven economy by 2024.
Feryal Clark, Minister for Cyber Security, emphasized the importance of setting global benchmarks for secure innovation to facilitate the development and deployment of AI in a secure environment. She believes this approach will create opportunities for businesses to flourish and deliver cutting-edge AI products that drive growth and enhance public services.
In addition to the code, the government has released an implementation guide to assist developers in understanding the specific requirements for different types of AI systems. The code is supported by 13 secure software development principles, including designing AI systems with security in mind and ensuring proper data and model disposal.
Ollie Whitehouse, Chief Technology Officer at the NCSC, praised the new code of practice for enhancing the resilience of AI systems against malicious attacks and fostering an environment conducive to AI innovation in the UK.
Furthermore, the government highlighted its participation in the launch of an International Coalition on Cyber Security Workforces, in collaboration with Japan, Singapore, and Canada. This coalition aims to facilitate cooperation among countries in addressing cyber threats and bridging the global cyber skills gap.
