The UK government has introduced a set of voluntary guidelines to help protect AI systems from cyber-attacks. The 'AI Cyber Security Code of Practice' provides recommendations for developers to safeguard their AI products and services from hacking, sabotage, and tampering. This initiative aims to establish a global standard for AI cybersecurity, ensuring British businesses are secure from cyber threats.

Safeguarding the Digital Economy

Technology Minister Saqib Bhatti emphasized the importance of creating a secure environment for the digital economy to thrive. The new measures focus on making AI models resilient to adversaries from the design phase. The Department for Science, Innovation and Technology (DSIT) and the National Cyber Security Centre (NCSC) have developed a code of practice based on the NCSC's guidelines for secure AI systems published last year.

The UK Cybersecurity Landscape

The publication of the draft AI Cyber Security Code of Practice comes at a time when the UK cybersecurity sector is experiencing mixed fortunes. While the sector grew by 13% last year, half of businesses and nearly a third of charities were targeted by cyber-attacks during the same period. The increasing demand for generative AI among businesses may create new opportunities for cybercriminals to launch attacks.

Addressing Emerging Threats

The new AI cybersecurity guidelines will provide businesses with best practices and recommendations to handle these challenges. The NCSC's chief executive, Felicity Oswald, stated that the codes of practice will assist the cybersecurity industry in designing AI models and software that are secure and resilient to malicious attacks. Establishing standards for security will strengthen collective resilience, and organizations are encouraged to follow these requirements to keep the UK online safe.

Best Practices for AI Security

Organizations should engage with data protection experts, monitor regulatory changes, and implement best practices such as minimizing and anonymizing data use, establishing data governance policies, securing data environments, advising staff on security protocols, and conducting regular audits. The call for views on the codes of practice is part of the government's broader work on AI safety, with the opposition Labour Party promising to unveil its views on AI in the coming weeks.