A Method for Effective Threat Management Related to Artificial Intelligence Using ISO 27001 in the Context of GIS

Abstract:

The aim of the article is to present a method of effective management of threats related to artificial intelligence (AI) in the context of geographic information systems (GIS) using the ISO 27001 standard. The scientific innovation of the work lies in the integration of information security management standards with AI technologies, which allows for better protection of data and GIS systems against potential threats. The practical value of the article results from the possibility of applying the presented methods in real operating environments, which can contribute to increasing the level of security and resilience of systems.

The article uses two main research methods: literature analysis and case studies. The literature analysis allowed us to identify key risks related to AI in the context of GIS and to determine best practices in risk management. The case study included an analysis of the implementation of security measures in three different companies, which allowed the effectiveness of the measures taken to be assessed.

The main results of the research indicate a significant improvement in the speed of incident response after implementing security in accordance with the ISO 27001 standard. In particular, the largest reduction in response time was recorded in companies that implemented a comprehensive approach to risk management, including data encryption, access management, and continuous monitoring and auditing. These results confirm the effectiveness of ISO 27001 in managing AI risks in the context of GIS, while also highlighting the importance of continuous improvement of security processes.