Report on public sector AI use must balance tech with robust governance

A new report by UKAuthority Inform, produced in partnership with Zscaler, highlights how artificial intelligence (AI) is rapidly changing the cybersecurity landscape for the UK public sector, presenting both new risks and opportunities for defence.

Cyber adversaries are already using AI to strengthen phishing, accelerate vulnerability research, and hasten data exfiltration, while the availability of intrusion tools "as a service" lowers the barrier for attackers. 

Meanwhile, the rise of shadow AI and AI embedded in supplier products are widening the attack surface and increasing the risk of data loss.

In defence, however, AI is proving valuable by detecting anomalies, monitoring internal AI use, analysing generative AI prompts to block risky behaviour, and enhancing zero-trust strategies across complex systems. The report concludes that while AI is not a "silver bullet," successfully harnessing it requires a balanced approach that combines technology with robust governance, including establishing clear, acceptable-use policies, improving AI literacy, and fostering collaboration across the public sector, as envisioned by the Government's Defend as One strategy.

Training Announcement: Freevacy offers a range of independently recognised professional AI governance qualifications and AI Literacy short courses that enable specialist teams to implement robust oversight, benchmark AI governance maturity, and establish a responsible-by-design approach across the entire AI lifecycle. Find out more.