AI Governance Library

Industry Temperature Check: Barriers and Enablers to AI Assurance

A UK industry temperature check on barriers and enablers to AI assurance. It synthesises stakeholder engagements and proposes sector-specific interventions for HR and recruitment, finance, and connected and automated vehicles.
Cover of Industry Temperature Check: Barriers and Enablers to AI Assurance

⚡ Quick Summary

Published by the Centre for Data Ethics and Innovation, this report presents findings on barriers and enablers to AI assurance in the UK. It defines AI assurance as mechanisms to assess and communicate reliable evidence about the trustworthiness of AI systems, and situates assurance within the government’s risk-based, pro-growth approach to AI governance. The report was developed to support the CDEI’s AI Assurance Programme and its Roadmap to an Effective AI Assurance Ecosystem.

The report synthesises ministerial roundtables, a CDEI x techUK symposium, semi-structured interviews and an online survey. It identifies assurance as part of wider organisational risk management and describes a proportionate approach: lower-risk contexts may use less formal techniques such as impact assessments, while higher-risk uses may combine impact assessment, performance testing, conformity assessment and validation. Its central deliverable is a cross-sector and sector-specific account of obstacles to adoption, matched with potential interventions including guidance, repositories, training, standards resources, recognition mechanisms and clearer regulatory links.

🧩 What’s Covered

The report progresses from cross-sector findings to focused analysis of three sectors and a summary of future interventions.

  • Key themes: Sets out six cross-sector observations: assurance is embedded in wider risk management; techniques should be proportionate to lifecycle stage, risk, sector and use case; third-party services need credible certification or accreditation; standards can support assurance but are difficult to navigate; impact assessments are commonly an initial step; and assurance is driven by trust, reputation and regulatory compliance.
  • Barriers to assurance: Groups common barriers into workforce, organisational, operational/market and governance categories. These include insufficient AI-risk knowledge and skills, limited senior buy-in and resources, fragmented provider approaches using different metrics, and hesitation caused by uncertainty about future regulatory requirements.
  • Potential interventions: Records demand for concrete operational guidance, sector-relevant repositories and tools, support that SMEs can implement within constrained budgets and timescales, common language for concepts such as fairness and explainability, and mappings between assurance activities and regulatory requirements.
  • Sector context and comparison: Explains the UK’s decentralised, context-based approach and six proposed regulatory principles, then compares the relative priority of barriers in HR and recruitment, finance and CAV. It notes that respondents selected their three most pressing barriers and that the HR sample may have been smaller.
  • HR and recruitment and finance: Describes AI uses and associated risks in each sector. It covers recruitment risks including discriminatory bias, consent and data-protection issues; and financial-services uses in fraud detection, customer interaction, risk management and compliance. Proposed responses include procurement-life-cycle guidance, leadership awareness, training, an assurance-technique repository and adapting established governance mechanisms such as audit.
  • Connected and automated vehicles: Explains sensor-led functions including object detection, localisation, route planning and automated decisions. It treats CAV as safety-critical, identifies gaps in standards awareness, recognition mechanisms and signposted practice, and points to standards repositories, emerging governance measures and case-study examples.
  • Methodology and next steps: Maps prominent barriers to proposed interventions and explains that the findings draw on qualitative thematic analysis of four engagement activities. The sector-targeted online survey had 41 respondents across sectors.

💡 Why it matters?

The report helps governance, compliance and assurance teams distinguish between technical risks that may be addressed through model design or input data, and governance risks that may require policy or process changes. It also identifies why a single assurance technique is unlikely to suit every deployment: lifecycle stage, risk level, sector, use case and legal or regulatory requirements affect the appropriate approach.

For organisations using or procuring AI, the sector findings clarify recurring practical gaps—skills, awareness, guidance and mechanisms for recognising assurance efforts. The report also connects assurance to demonstrating compliance with relevant regulation, while noting the need for clarity on how assurance activities support regulatory principles.

❓ What’s Missing

This is a thematic temperature check rather than an implementation standard or technical assurance manual. It names methods such as impact assessments, performance testing, conformity assessment and validation, but does not specify test procedures, measurement thresholds or audit evidence for applying them. The methodology identifies the four engagement activities, states that the online survey had 41 respondents and says qualitative thematic analysis was conducted, but it does not provide the survey instrument, a respondent breakdown by sector, raw results or a detailed coding procedure. Several interventions and regulatory developments are explicitly described as forthcoming or ongoing, so the document does not establish whether those proposals were subsequently delivered or how effective they proved.

👥 Best For

UK-based AI governance, risk and compliance leads seeking a concise account of reported adoption barriers and possible support measures. It is especially relevant to HR and recruitment organisations procuring AI tools, financial-services teams adapting existing audit and governance practices, and CAV organisations navigating standards and emerging recognition mechanisms.

📄 Source Details

Industry Temperature Check: Barriers and Enablers to AI Assurance was published by the Centre for Data Ethics and Innovation in December 2022. The 43-page English-language report names no individual authors. It reports findings from CDEI industry engagement activities and an online survey of 41 respondents across the three featured sectors.

About the author
Jakub Szarmach

AI Governance Library

Curated Library of AI Governance Resources

AI Governance Library

Great! You’ve successfully signed up.

Welcome back! You've successfully signed in.

You've successfully subscribed to AI Governance Library.

Success! Check your email for magic link to sign-in.

Success! Your billing info has been updated.

Your billing was not updated.