Do AI projects still need to meet the government Service Standard?

Answered

Yes. AI services must meet the same standards as other technology. If you build a service, meet the Service Standard (TCoP point 13). Point 9 requires Secure by Design principles; point 11 expects teams to understand AI technologies and avoid tech choices that undermine reliable information or decisions. All government AI must be secure and resilient per security.gov.uk. Follow Secure by Design / Service Manual security expectations.

From the guidance

Primary (how) Service Manual: Using artificial intelligence (AI) in services

Services using AI need to meet the same standards as services using other technology.

Section: Using artificial intelligence (AI) in services

Read this in Service Manual: Using artificial intelligence (AI) in services (opens in new tab)

Secondary (normative) Service Standard: 9. Create a secure service which protects users’ privacy

Service teams must follow the Secure By Design principles and ensure senior leaders accountable for security are aware of risks, plan and budget for security over the life of the service, and perform due diligence on third-party software.

Section: 9. Create a secure service which protects users’ privacy

Read this in Service Standard: 9. Create a secure service which protects users’ privacy (opens in new tab)

Secondary (normative) Service Standard: 11. Choose the right tools and technology

Understand how the technology they use works, including emerging technologies and artificial intelligence (AI).

Section: 11. Choose the right tools and technology

Read this in Service Standard: 11. Choose the right tools and technology (opens in new tab)

Secondary (normative) Technology Code of Practice

If you’re building a service as part of your technology project or programme you will also need to meet the Service Standard

Section: 13. Meet the Service Standard

Read this in Technology Code of Practice (opens in new tab)

Secondary (normative) AI Playbook for the UK Government

If you develop a service, you must use the government Service Standard.

Section: Principle 5: You understand how to manage the full AI life cycle

Read this in AI Playbook for the UK Government (opens in new tab)

Secondary (normative) About Secure by Design

The Service Standard Point 9 advises service teams that they must follow the Secure by Design principles.

Section: Secure by Design’s wider context

Read this in About Secure by Design (opens in new tab)

Secondary (normative) Artificial Intelligence (security.gov.uk)

All government AI technologies and services must be secure and resilient. They should comply with the Secure by Design principles and the government’s Cyber Security Standard.

Section: Using AI securely

Read this in Artificial Intelligence (security.gov.uk) (opens in new tab)

Related questions