OIG study finds that only 7% of gov’t agencies use AI

One key takeaway from a study by the Puerto Rico Office of the Inspector General is the critical need for government operations to integrate and utilize artificial intelligence. Data from the study of 90 government agencies highlights a significant opportunity for digital transformation that remains largely untapped, even with a variety of available tools.

By THE STAR STAFF

A recent study by the Puerto Rico Office of the Inspector General (OIG by its initials in Spanish) reveals that a mere 7% of 90 government agencies in Puerto Rico are leveraging artificial intelligence (AI) tools to improve their services.

The OIG’s research evaluated how well government entities comply with existing technology governance regulations. It underscored the urgent need to adopt artificial intelligence to enhance efficiency, cut costs, bolster internal and external networks, optimize vulnerability management, and ensure the seamless operation and interconnectedness of government information systems.

Conducted in line with Joint Memos OIG-CC-2024-01 and OIG-CC-2024-02, the study involved all 90 government entities and their associated departments, making it the most thorough assessment of governmental technological maturity in Puerto Rico to date, based on standardized criteria.

The goal of the study is to maximize the use of technological resources within government bodies by systematically identifying strengths, weaknesses and opportunities for improvement, as detailed in the report accompanying the study.

One key takeaway is the critical need for government operations to integrate and utilize artificial intelligence. At the time of the study, only 7% of respondents reported employing AI-based solutions to boost service efficiency or lower operational costs. That figure highlights a significant opportunity for digital transformation that remains largely untapped, even with a variety of available tools.

The intervention also stressed the importance of tightening controls, updating internal policies and enhancing the operational capabilities of the entities to mitigate technological risks and ensure business continuity.

In the realm of cybersecurity, the OIG assessed the protective measures in place across agencies and discovered that more than 40 entities could not demonstrate completion of vulnerability assessments to gauge risks to their systems. Additionally, the study pointed out significant gaps, including a lack of data retention and file encryption policies, no regular drills to prepare for cyber threats, and ineffective connections between the information systems of various agencies and other entities.

Moreover, the report evaluated how accessible government agency websites are and how effectively they manage digital content. Of the 90 entities assessed, 69 do not utilize a content management system, or CMS, while 45 lack an accessibility evaluation from the Puerto Rico Innovation and Technology Service, or PRITS.

“While some areas demonstrated adequate compliance, such as general regulatory adherence, technology inventory management, project planning, and tech-related human resources administration, several improvement opportunities remain,” the OIG report outlined. “Enhancements could include bolstering process documentation, implementing regular risk assessments, strengthening data backup and storage systems, and modernizing technological infrastructure.”

The findings emerged after the 90 entities under the OIG’s jurisdiction filled out a questionnaire concerning technology governance, administered through their chief information officers, or officials in equivalent roles. The study encompassed various critical aspects, such as equipment and software license inventories, plans for replacing or acquiring equipment, technology project plans, and measures for infrastructure and data protection, as well as cybersecurity and the use of artificial intelligence.