Guide to AI and Information Security – seizing opportunities, managing risks

Artificial intelligence (AI) is considered a key technology for companies, but it brings with it new security-related challenges. Bitkom’s AI and Information Security Guide provides organisations with a structured overview of the risks, safeguards and opportunities associated with the use of AI.

The goal of this resource is to provide companies with a practical guide that both addresses risks and shows potential. This illustrates how AI can be used responsibly to meet security standards and increase trust in digital systems.

In the first part, the guide shows how companies can protect AI systems against attacks. It addresses threats such as data poisoning, model evasion and model extraction. In addition, recommendations for action are made to ensure the resilience and robustness of AI systems, for example through data quality management, adversarial training or strict access controls.

In the second part, the guide shows how AI itself can contribute to improving information security. Examples include automated detection of attack patterns in security event monitoring, support in identity and access management, improved endpoint protection, and data leakage prevention.

The guide is aimed at organizations of all industries that integrate or already use AI in their processes. Particularly addressed are IT security managers, executives as well as specialists and executives responsible for digital strategies. The publication provides them with a basis for making informed decisions about the safe and at the same time profitable use of AI.

bitkom e.V. is an association of the digital economy with more than 2,000 member companies in Germany and a think tank on digital topics.

Link to the summary of the guide: https://www.bitkom.org/Bitkom/Publikationen/KI-Informationssicherheit

Direct link to the guide: https://www.bitkom.org/sites/main/files/2025-04/bitkom-leitfaden-ki-und-informationssicherheit.pdf