The Role of Information Security in Responsible AI for Digital SMEs

The integration of Information Security (InfoSec) in Responsible AI (RAI) implementations has emerged as a critical focal point, particularly in addressing the unique challenges faced by Digital SMEs (Digital Small and Medium-sized Enterprises are SMEs whose core operations rely heavily on digital technologies. They are further explained in chapter 2.1, “SMEs and Digital SMEs”. SMEs, used throughout this paper, specifically refers to Digital SMEs). This review examines the evolving role of InfoSec in shaping RAI implementations, emphasizing the importance of integrated frameworks to maximize resource efficiency and cohesively address both domains. While existing studies focus mainly on technical and policy-driven solutions, there is an under-representation of non-technical barriers, particularly the human factor, despite its critical role in InfoSec. Organizational culture, employee awareness, and stakeholder engagement are critical yet often overlooked components of InfoSec, despite their pivotal role in achieving a balance across the three core pillars of InfoSec, that is: people, processes, and technologies. With insights from significant studies and internationally recognized frameworks for AI governance and InfoSec, this analysis highlights the advantages of adopting integrated approaches for simplified and holistic InfoSec and RAI implementations. Emphasis shall also be placed on understanding the role of the Human Factor in these frameworks and identifying its significance in building sustainable and ethical AI practices. By synthesizing existing data, this study provides actionable insights to support SMEs in building resilient, secure, and ethical digital practices tailored to their unique needs.