--- title: Balancing Security and Access for increased algorithmic integrity description: Balancing security and access - crucial for algorithmic integrity. Ensure robust security while granting necessary visibility and access. image: https://riskinsights.com.au/hubfs/Keys%20and%20Golden%20Keyring%20with%20the%20Word%20Code%20over%20Black%20Wooden%20Table%20with%20Blur%20Effect.%20Toned%20Image..jpeg --- [Skip to content](https://riskinsights.com.au/blog/balance-security-access#main-content) [![Risk Insights - Logo - (RGB, Horizontal, Small)](https://riskinsights.com.au/hs-fs/hubfs/Risk%20Insights%20-%20Logo%20-%20(RGB%2c%20Horizontal%2c%20Small).png?width=200&height=40&name=Risk%20Insights%20-%20Logo%20-%20(RGB%2c%20Horizontal%2c%20Small).png)](https://riskinsights.com.au) - [Articles](https://riskinsights.com.au/blog) - [Approach](https://riskinsights.com.au/approach) - [About](https://riskinsights.com.au/about) - [Contact](https://riskinsights.com.au/contact) Open main navigation Close main navigation - [Articles](https://riskinsights.com.au/blog) - [Approach](https://riskinsights.com.au/approach) - [About](https://riskinsights.com.au/about) - [Contact](https://riskinsights.com.au/contact) --- 18 Sep 2024 # Balancing Security and Access for increased algorithmic integrity ![Picture of Yusuf Moolla](https://riskinsights.com.au/hs-fs/hubfs/Yusuf_Moolla_Headshot-transformed.png?width=50&name=Yusuf_Moolla_Headshot-transformed.png) [Yusuf Moolla](https://riskinsights.com.au/blog/author/yusuf) Share: [linkedin-in icon](http://www.linkedin.com/shareArticle?mini=true&url=https://riskinsights.com.au/blog/balance-security-access) [envelope icon](mailto:?body=https://riskinsights.com.au/blog/balance-security-access) **TL;DR** • Algorithm integrity requires a balance between preventing access and ensuring access. • Overly restrictive access can impair oversight, decision-making, and transparency. • Aim for security measures that protect, without hindering legitimate work and oversight.   When we talk about security in algorithmic systems, it's easy to focus solely on keeping the bad guys out. But there's another side to this coin that's just as important: making sure the right people can get in. This article aims to explain how security and access work together for better algorithm integrity. ### [Podcast icon Listen to the audio (human) version of this article - Episode 6 of Algorithm Integrity Matters](https://riskinsights.com.au/algorithm-integrity-matters-podcast#E6) ## Why Does This Balance Matter? Let’s break it down. ### Keeping Bad Actors Out It's obvious why we need to prevent unauthorised access. Bad actors could: - Steal Sensitive Data - Manipulate Algorithms for Their Benefit - Cause System Failures or Disruptions These can lead to financial losses, reputational damage, and even legal consequences. Robust security measures are a must. ### Ensuring Necessary Access Here's where it gets tricky. While we're busy building digital fortresses, we need to make sure we're not locking out the good guys. Prioritise access over security, and you're leaving the door open for potential breaches and misuse. If you lean too far, and don’t give people the access they need, you can’t effectively ensure integrity.  This creates a paradoxical situation where overzealous security measures actually create or increase risk. Here's why, with reference to the 10 key aspects of algorithm integrity from [a previous article](https://riskinsights.com.au/blog/10-key-aspects-of-algorithm-integrity): | **Key aspect of algorithm integrity** | **Risk of not providing access** | **Ref.** | | --- | --- | --- | | 1.     Accuracy and robustness | Limited Oversight | A | | 2.    Alignment with objectives | Impaired Decision Making | B | | 3.    Fairness *(incl. impact assessments)* | Limited Oversight | A | | 4.    Transparency and explainability | Reduced Transparency | D | | 5.    Security | Workarounds and Shadow IT | C | | 6.    Privacy | Workarounds and Shadow IT | C | | 7.    Governance, Accountability and Auditability | Reduced Transparency | D | | 8.    Risk Management | Missed Early Warnings | E | | 9.    Ethics and Training | Limited Oversight | A | | 10. Compliance | Incomplete Audits | F | 1. Limited Oversight: teams responsible for governing, monitoring and controlling algorithmic systems need access to perform their duties effectively. Without it, they're flying blind. 2. Impaired Decision Making: Leaders and managers need access to make informed decisions about system development and deployment. Limited access can lead to decisions based on incomplete information. 3. Workarounds and Shadow IT: when users can't access the data they need, they might use unsanctioned tools or copy data to other environments, inadvertently creating new security risks. 4. Reduced Transparency: overly restrictive access can make it difficult to efficiently provide transparency to executives, regulators or other stakeholders. 5. Missed Early Warnings: small irregularities can be early indicators of larger problems. These subtle signs might go unnoticed until they escalate. 6. Incomplete Audits: auditors need full visibility. ## Security and access are complementary Robust security is crucial, but it must be balanced with the need for oversight and control. The goal should be to create a secure algorithmic system that still allows for the necessary visibility and access to maintain integrity. Ensuring that the right people have the right access reduces risk. We want security measures that don't hinder legitimate work, and access that doesn't compromise security. By getting it right, we enhance algorithmic integrity.   --- Disclaimer: The information in this article does not constitute legal advice. It may not be relevant to your circumstances. It may not be appropriate for high-risk use cases (e.g., as outlined in *The Artificial Intelligence Act - Regulation (EU) 2024/1689*, a.k.a. the EU AI Act). It was written for consideration in certain algorithmic contexts within banks and insurance companies, may not apply to other contexts, and may not be relevant to other types of organisations.  ---     ![Weekly Articles                                                                                             Get weekly emails in your inbox.  ](https://hubspot-no-cache-ap1-prod.s3.amazonaws.com/cta/default/44032070/interactive-182785203045.png) ## Related posts [![Digital lock on circuit background](https://riskinsights.com.au/hs-fs/hubfs/Conceptual%20digital%20image%20of%20lock%20on%20circuit%20background.jpeg?height=200&name=Conceptual%20digital%20image%20of%20lock%20on%20circuit%20background.jpeg)](https://riskinsights.com.au/blog/security_deprovisioning) ## [Deprovisioning User Access to Maintain Algorithm Integrity](https://riskinsights.com.au/blog/security_deprovisioning) TL;DR • Proper deprovisioning of user access helps maintain algorithm integrity. • Neglecting this... [Read more](https://riskinsights.com.au/blog/security_deprovisioning) [![Automotive crash test dummy strapped into car seat, head against air bag](https://riskinsights.com.au/hs-fs/hubfs/Automotive%20crash%20test%20dummy%20strapped%20into%20car%20seat%2c%20head%20against%20air%20bag.jpeg?height=200&name=Automotive%20crash%20test%20dummy%20strapped%20into%20car%20seat%2c%20head%20against%20air%20bag.jpeg)](https://riskinsights.com.au/blog/testing-algorithmic-systems) ## [Algorithmic System Integrity: Testing](https://riskinsights.com.au/blog/testing-algorithmic-systems) TL;DR • Testing is a core basic step for algorithmic integrity. • Testing involves various stages,... [Read more](https://riskinsights.com.au/blog/testing-algorithmic-systems) [![Sharing the load on vendor risk](https://riskinsights.com.au/hs-fs/hubfs/Vendor%20checks%20you%20may%20be%20better%20placed%20to%20do%20than%20central%20teams.png?height=200&name=Vendor%20checks%20you%20may%20be%20better%20placed%20to%20do%20than%20central%20teams.png)](https://riskinsights.com.au/blog/sharing-the-load-on-vendor-risk) ## [Sharing the load on vendor risk](https://riskinsights.com.au/blog/sharing-the-load-on-vendor-risk) TL;DR • Central governance isn’t always enough for algorithmic systems delivered with/by vendors. •... [Read more](https://riskinsights.com.au/blog/sharing-the-load-on-vendor-risk) We acknowledge Aboriginal and Torres Strait Islander peoples as the Traditional Custodians of the lands on which we live and work. We pay our respects to Elders past and present, and honour the rich diversity of the world's oldest living cultures. [View our LinkedIn page](https://www.linkedin.com/company/riskinsightsap) [email us](mailto:info@riskinsights.com.au) [Call us](tel:+61408946143) 2026 Risk Insights Pty. Ltd. | [Privacy](https://riskinsights.com.au/privacy-policy) | [Disclaimer](https://riskinsights.com.au/disclaimer) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Yusuf Moolla", "url" : "https://riskinsights.com.au/blog/author/yusuf" }, "dateModified" : "2024-11-14T13:15:58.984Z", "datePublished" : "2024-09-17T19:00:00.000Z", "headline" : "Balancing Security and Access for increased algorithmic integrity", "image" : [ "https://riskinsights.com.au/hubfs/Keys%20and%20Golden%20Keyring%20with%20the%20Word%20Code%20over%20Black%20Wooden%20Table%20with%20Blur%20Effect.%20Toned%20Image..jpeg" ], "mainEntityOfPage" : { "@id" : "https://riskinsights.com.au/blog/balance-security-access", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://riskinsights.com.au/hubfs/Risk%20Insights%20-%20Logo%20-%20(RGB%2c%20Horizontal%2c%20Small).png" }, "name" : "Risk Insights Pty. Ltd." } } ```