AI in control: Rethinking cybersecurity compliance and auditing

Fatma Yasmine Loumachi; Márcio J. Lacerda; Karim Ouazzane; Asma Adnane; Oksana Adamyk

doi:10.1016/j.infsof.2026.108132

journal article Open Access Jul 01, 2026

AI in control: Rethinking cybersecurity compliance and auditing

Fatma Yasmine Loumachi

Márcio J. Lacerda Karim Ouazzane Asma Adnane

Oksana Adamyk

Information and Software Technology Vol. 195 pp. 108132 · Elsevier BV

View at Publisher Save 10.1016/j.infsof.2026.108132

Topics

No keywords indexed for this article. Browse by subject →

References

146

[1]

D. Itani, R. Itani, A.A. Eltweri, A. Faccia, L. Wanganoo, Enhancing Cybersecurity Through Compliance and Auditing: A Strategic Approach to Resilience, in: 2024 2nd International Conference on Cyber Resilience, ICCR, 2024, pp. 1–10. 10.1109/iccr61006.2024.10532959

[2]

Henriques "A forensics and compliance auditing framework for critical infrastructure protection" Int. J. Crit. Infrastruct. Prot. (2023) 10.1016/j.ijcip.2023.100613

[3]

PCI DSS v4.0.1 (2024)

[4]

ISO/IEC (2022)

[5]

National Institute of Standards and Technology (2025)

[6]

International Organization for Standardization (2018)

[7]

ISA (2009)

[8]

Amor "The promise of automated compliance checking" Dev. Built Environ. (2021)

[9]

Audit masquerade: How audits provide comfort rather than treatment for serious safety problems

Ben Hutchinson, Sidney Dekker, Andrew Rae

Safety Science 2024 10.1016/j.ssci.2023.106348

[10]

European Parliament and Council of the European Union (2016)

[11]

Marotta (2020)

[12]

Artificial intelligence and machine learning in cybersecurity: a deep dive into state-of-the-art techniques and future paradigms

Nachaat Mohamed

Knowledge and Information Systems 2025 10.1007/s10115-025-02429-y

[13]

Deng "PentestGPT: Evaluating and harnessing large language models for automated penetration testing" (2024)

[14]

Zhang "A deep neural network for unsupervised anomaly detection and diagnosis in multivariate time series data" (2019)

[15]

Papagiannidis "Responsible artificial intelligence governance: A review and research framework" J. Strateg. Inf. Syst. (2025) 10.1016/j.jsis.2024.101885

[16]

Haveman "Organizational theory: From classical sociology to the 1970s" Sociol. Compass (2019) 10.1111/soc4.12627

[17]

of Management (2025)

[18]

Cen "From transparency to accountability and back: A discussion of access and evidence in AI auditing" (2024)

[19]

High-Level Expert Group on Artificial Intelligence (2019)

[20]

Saeed "Security, privacy, and robustness for trustworthy AI systems: A review" Comput. Electr. Eng. (2024) 10.1016/j.compeleceng.2024.109643

[21]

Thanasas "Enhancing transparency and efficiency in auditing and regulatory compliance with disruptive technologies" Theor. Econ. Lett. (2025) 10.4236/tel.2025.151013

[22]

W. Wang, S.M. Sadjadi, N. Rishe, A Survey of Major Cybersecurity Compliance Frameworks, in: 2024 IEEE 10th Conference on Big Data Security on Cloud (BigDataSecurity), 2024, pp. 23–34. 10.1109/bigdatasecurity62737.2024.00013

[23]

Marotta "Convergence and divergence of regulatory compliance and cybersecurity" Issues Inf. Syst. (2021)

[24]

NIST Computer Security Resource Center (2025)

[25]

NIST Computer Security Resource Center (2025)

[26]

Bhat "Doctrinal legal research as a means of synthesizing facts, thoughts, and legal principles" (2020)

[27]

Generative AI in cybersecurity: A comprehensive review of LLM applications and vulnerabilities

Mohamed Amine Ferrag, Fatima Alwahedi, Ammar Battah et al.

Internet of Things and Cyber-Physical Systems 2025 10.1016/j.iotcps.2025.01.001

[28]

Kheddar "Transformers and large language models for efficient intrusion detection systems: A comprehensive survey" Inf. Fusion (2025) 10.1016/j.inffus.2025.103347

[29]

Kheddar "Reinforcement-Learning-Based intrusion detection in communication networks: A review" IEEE Commun. Surv. Tutor. (2024)

[30]

Maniriho "A survey of recent advances in deep learning models for detecting malware in desktop and mobile platforms" ACM Comput. Surv. (2024) 10.1145/3638240

[31]

Cybersecurity knowledge graphs

Leslie F. Sikos

Knowledge and Information Systems 2023 10.1007/s10115-023-01860-3

[32]

A Survey on Explainable Artificial Intelligence for Cybersecurity

Gaith Rjoub, Jamal Bentahar, Omar Abdel Wahab et al.

IEEE Transactions on Network and Service Managemen... 2023 10.1109/tnsm.2023.3282740

[33]

Macas "A survey on deep learning for cybersecurity: Progress, challenges, and opportunities" Comput. Netw. (2022) 10.1016/j.comnet.2022.109032

[34]

Brundage (2020)

[35]

AIinControl2025 (2025)

[36]

Shakerin "White-box induction from SVM models: Explainable AI with logic programming" Theory Pract. Log. Program. (2020) 10.1017/s1471068420000356

[37]

Explainable Artificial Intelligence (XAI): Concepts, taxonomies, opportunities and challenges toward responsible AI

Alejandro Barredo Arrieta, Natalia Díaz-Rodríguez, Javier Del Ser et al.

Information Fusion 2020 10.1016/j.inffus.2019.12.012

[38]

Anava "K-Nearest neighbors: From global to local" (2016)

[39]

Haug "Dynamic model tree for interpretable data stream learning" (2022)

[40]

The mythos of model interpretability

Zachary C. Lipton

Communications of the ACM 2018 10.1145/3233231

[41]

Gama "Adaptive Bayes" (2002)

[42]

J. Rosaler, D. Desai, B. Sarmah, D. Vamvourellis, D. Onay, S. Pasquali, D. Mehta, Enhanced Local Explainability and Trust Scores with Random Forest Proximities, in: Proceedings of the 5th ACM International Conference on AI in Finance, ICAIF’24, 2024, pp. 521–529. 10.1145/3677052.3698615

[43]

Garnelo (2016)

[44]

Landajuela "Discovering symbolic policies with deep reinforcement learning" (2021)

[45]

J. Guo, J. Cheng, J. Cleland-Huang, Semantically Enhanced Software Traceability Using Deep Learning Techniques, in: 2017 IEEE/ACM 39th International Conference on Software Engineering, ICSE, 2017, pp. 3–14. 10.1109/icse.2017.9

[46]

Deep learning

Yann LeCun, Yoshua Bengio, Geoffrey Hinton

Nature 2015 10.1038/nature14539

[47]

Evaluation of post-hoc interpretability methods in time-series classification

Hugues Turbé, Mina Bjelogrlic, Christian Lovis et al.

Nature Machine Intelligence 2023 10.1038/s42256-023-00620-w

[48]

Provenance-Enabled Explainable AI

Jiachi Zhang, Wenchao Zhou, Benjamin E. Ujcich

Proceedings of the ACM on Management of Data 2024 10.1145/3698826

[49]

Zhang "A survey on deep learning for big data" Inf. Fusion (2018) 10.1016/j.inffus.2017.10.006

[50]

Marcus (2018)

Showing 50 of 146 references

Metrics

0

Citations

146

References

Details

Published: Jul 01, 2026
Vol/Issue: 195
Pages: 108132
License: View

Authors

F

Fatma Yasmine Loumachi

Loughborough Business School, Loughborough University, Loughborough LE11 3TU, UK

Cite This Article

Fatma Yasmine Loumachi, Márcio J. Lacerda, Karim Ouazzane, et al. (2026). AI in control: Rethinking cybersecurity compliance and auditing. Information and Software Technology, 195, 108132. https://doi.org/10.1016/j.infsof.2026.108132

AI in control: Rethinking cybersecurity compliance and auditing

You May Also Like