TY  - JOUR
AU  - Sun, Fang
PY  - 2026
DA  - 2026/07/21
TI  - Data Governance and Policy Support for Secure AI-Driven Corporate Digital Transformation
JO  - Journal of Reliable and Secure Computing
T2  - Journal of Reliable and Secure Computing
JF  - Journal of Reliable and Secure Computing
VL  - 2
IS  - 3
SP  - 164
EP  - 178
DO  - 10.62762/JRSC.2026.326448
UR  - https://www.icck.org/article/abs/JRSC.2026.326448
KW  - secure data governance
KW  - AI-driven corporate digital transformation
KW  - trustworthy AI
KW  - cybersecurity
KW  - privacy-preserving computation
KW  - compliance framework
KW  - model security
AB  - Artificial intelligence is becoming a core engine of corporate digital transformation, but its value depends first on secure, reliable, and accountable data and model infrastructures. As firms combine cloud platforms, edge devices, IoT sensors, digital twins, platform data, and algorithmic decision systems, they also expand the attack surface, privacy exposure, model security risk, and compliance burden. This paper develops a security-aware data and AI governance framework for AI-driven corporate digital transformation. It positions the framework as a unified governance model rather than a narrow extension of data management: data governance controls data classification, provenance, access, privacy, and sharing, while AI governance assures model validation, robustness, auditability, and accountability. The paper identifies six dilemmas: data sharing versus protection, weak provenance and pipeline security, adversarial or opaque AI models, vulnerabilities in cloud-edge-IoT and digital-twin ecosystems, unequal compliance capacity between large firms and SMEs, and fragmented coordination across cybersecurity, privacy, competition, and industrial policy. It then proposes an integrated agenda of tiered data governance, zero-trust and encryption-based security, privacy-enhancing collaboration, model validation and adversarial testing, algorithmic audit, incident response, regulatory sandboxes, certification, public secure data spaces, maturity indicators, and SME-oriented compliance services. The study contributes to reliable and secure computing research by showing that technical controls, organizational routines, and policy support must be integrated to enable trustworthy AI-driven transformation across firms of different sizes and sectors.
SN  - 3070-6424
PB  - Institute of Central Computation and Knowledge
LA  - English
ER  - 

@article{Sun2026Data,
  author = {Fang Sun},
  title = {Data Governance and Policy Support for Secure AI-Driven Corporate Digital Transformation},
  journal = {Journal of Reliable and Secure Computing},
  year = {2026},
  volume = {2},
  number = {3},
  pages = {164-178},
  doi = {10.62762/JRSC.2026.326448},
  url = {https://www.icck.org/article/abs/JRSC.2026.326448},
  abstract = {Artificial intelligence is becoming a core engine of corporate digital transformation, but its value depends first on secure, reliable, and accountable data and model infrastructures. As firms combine cloud platforms, edge devices, IoT sensors, digital twins, platform data, and algorithmic decision systems, they also expand the attack surface, privacy exposure, model security risk, and compliance burden. This paper develops a security-aware data and AI governance framework for AI-driven corporate digital transformation. It positions the framework as a unified governance model rather than a narrow extension of data management: data governance controls data classification, provenance, access, privacy, and sharing, while AI governance assures model validation, robustness, auditability, and accountability. The paper identifies six dilemmas: data sharing versus protection, weak provenance and pipeline security, adversarial or opaque AI models, vulnerabilities in cloud-edge-IoT and digital-twin ecosystems, unequal compliance capacity between large firms and SMEs, and fragmented coordination across cybersecurity, privacy, competition, and industrial policy. It then proposes an integrated agenda of tiered data governance, zero-trust and encryption-based security, privacy-enhancing collaboration, model validation and adversarial testing, algorithmic audit, incident response, regulatory sandboxes, certification, public secure data spaces, maturity indicators, and SME-oriented compliance services. The study contributes to reliable and secure computing research by showing that technical controls, organizational routines, and policy support must be integrated to enable trustworthy AI-driven transformation across firms of different sizes and sectors.},
  keywords = {secure data governance, AI-driven corporate digital transformation, trustworthy AI, cybersecurity, privacy-preserving computation, compliance framework, model security},
  issn = {3070-6424},
  publisher = {Institute of Central Computation and Knowledge}
}