“At ISMS we value very positively the creation of the Spanish Agency for the Supervision of Artificial Intelligence (hereinafter AESIA). If we look at what is indicated in article 4 “Object and purposes” of RD 729/2023, which approves the AESIA Statute, we see several responsibilities where cybersecurity and privacy professionals can make key contributions,” he highlights. For this expert, this role is reflected in initiatives such as " advice, awareness and training for the proper implementation of all related regulations, the minimization of the risks that the use of this new technology may entail."
Along with them, the ISISM Forum experts also highlight “the awareness, dissemination and promotion of training and the responsible, sustainable and reliable development Email Data and use of Artificial Intelligence, as well as the supervision of the implementation, use or commercialization of systems that include AI and, especially, those that may pose significant risks to health, safety, equal treatment and non-discrimination.”
García considers that “underlying all these responsibilities included in the Statute is the management of risks associated with the adoption and use of these AI systems . “This is an area of specialty of the different disciplines that we as information security professionals cover.”
Regarding the operation of this regulator, remember that “the process of digital transformation in organizations, and by extension its impact on society, is accelerated with AI and it is our role to give due digital confidence to this accelerated transformation . In this sense, we believe that AESIA has an opportunity to act as a catalyst for knowledge and adoption in AI.”
"After the preliminary contacts that we at ISMS have maintained with the Secretary of State for Digitalization and Artificial Intelligence for issues associated with AI, we perceive a very good predisposition to establish a public-private collaboration framework that enables the creation of valuable initiatives around the union of AI with the Association's own domains, such as privacy and data protection, cybersecurity, business continuity or regulatory compliance,” he points out.