Summary

Small and medium-sized enterprises (SMEs) face increasing pressure to meet cyber security standards, but many lack the time, expertise, and resources needed to understand and implement them effectively. As a result, they remain vulnerable to cyber attacks and struggle to improve their cyber resilience.

Recent advances in artificial intelligence (AI) offer the potential to make expert cyber security guidance more affordable and accessible. However, it is not yet known whether AI can provide advice that organisations understand, trust, and use confidently when making security decisions.

This project will investigate the feasibility of ASSIST (AI-powered Security and Standards Compliance Intelligent Advisory Support), an AI-assisted decision-support system designed to help SMEs understand cyber security standards, identify compliance gaps, and explain recommended actions in clear and accessible language. Working closely with SMEs, cyber security practitioners, and industry partners, the project will identify real-world needs, develop a proof-of-concept, and evaluate its effectiveness, usability, and trustworthiness.

Rather than replacing human experts, ASSIST will complement their expertise by providing explainable, trustworthy guidance that supports better-informed security decisions. The project will lay the foundations for future research into trustworthy AI that strengthens cyber resilience and broadens access to expert cyber security support for organisations of all sizes.