Ofcom’s Strategic Approach to AI

Ofcom (regulatory body for the communications/telecommunications industry in the UK) have published their strategic approach to AI. Interestingly Ofcom’s strategic approach references the UK government’s “pro-innovation” approach published by Michelle Donelan MP.

Below are the key takeaways:

1. Policy area telecommunications: “Monitor how AI can be used to counter cyber security risks across the vendor supply chain through engagement with industry.”

2. Policy area telecommunications: “Monitor AI related cyber security risks across the vendor supply chain by collecting intelligence through engagement with industry.”

3. Reference to the UK governments “pro-innovation” approach to AI: “As AI technologies continue to develop at pace, we look to harness the benefits while mitigating risks in line with the Government’s pro-innovation approach to AI.”

4. Reference to the TSA (Telecommunications Security Act) “telecoms providers take appropriate and proportionate measures to identify, reduce and prepare for security risks. Providers can use AI to monitor for abnormal
   activities to detect and address issues more efficiently, identify potential vulnerabilities
   as well as conduct predictive risk analysis.”

5. Key risk area: “Security and resilience: More advanced forms of AI, like GenAI, could be used to develop more virulent malware, identify vulnerabilities in networks, and/or provide instructions on how to breach network security. Poorly developed GenAI models could also contribute to the risk of system outages. For example, if source code is inefficient in its use of energy or bandwidth, or widespread use of the code by applications leads to an overall resource outage.” Mitigations in line with the risks are outlined in the strategic approach.

The full strategic approach can be found here.