A cityscape at night with a brightly lit, futuristic skyline. The scene features neon lights, with streaks of red, pink, and blue, reflecting off the wet road that leads toward the city. The sky is illuminated with vibrant, glowing hues.

Navigating the Path of Responsible AI

The GSMA Responsible AI Maturity Roadmap

AI holds the promise of significantly transforming the world. However, this presents both opportunities and risks. As AI adoption accelerates, organisations and governments globally are evaluating how best to leverage this technology for the welfare of people and the planet. Given that it is crucial that AI is designed, developed and deployed with ethical considerations in mind.

To support this goal, the GSMA collaborated with a group of mobile operators, AI experts and influencers to co-create a comprehensive, actionable Responsible AI Maturity Roadmap. Depending on an organisation’s level of maturity, it provides clear steps that can be followed against each of the key dimensions involved when implementing responsible AI (RAI) across an organisation.


The roadmap provides a structured framework to assist operators in evaluating and enhancing their practices. It is supported by a digital tool that helps identify and address any gaps in existing processes, together with clear recommendations on possible improvements.

The roadmap is relevant at any stage of AI adoption. Whether your organisation is just starting with AI, or is already adopting AI widely across its business, the roadmap will provide tailored guidance for the corresponding recommended level of RAI maturity. The organisation’s overall AI ambition defines the level of RAI maturity to be realised. The bigger the AI ambition an organisation has, the higher the level of Responsible AI maturity that should be implemented. The roadmap is relevant at any stage of AI adoption.

Ambitions are set organisation-wide, allowing individual use cases to be deployed at different scales (e.g. from pilots to full transformation).

The roadmap defines four levels of responsible AI maturity: Foundational, Evolving, Performing and Advanced. The maturity levels have been built to be factual, positively framed and incorporate the latest guidance and expert input.

Foundational

Initial awareness for RAI is established with four primary components in place

  1. Established AI principles
  2. Essential roles defined
  3. Basic registry/registries for tracking AI use cases established
  4. Established 3rd party basic RAI-specific criteria

Evolving


Presence of structured processes and early integration of RAI

Performing


RAI principles are integrated with robust processes and governance

Advanced


RAI practices are deeply embedded into the culture with proactive management

Five Responsible AI Dimensions

RAI maturity levels are defined across five core underlying dimensions. The five dimensions break down into 20 sub-dimensions in order to identify all the RAI components that need to be established.

A simplistic line drawing of an eye with lines extending from its corners, connecting to circles, possibly representing a technological or digital theme. The design is symmetrical and lacks color, depicted in white on a plain background.
Vision
Operating
Model

Technical Controls

Third-party Ecosystem


Dimensions vs Maturity

This table shows required actions at the dimension level and for each maturity level.


Vision

Vision

Foundational

Established RAI principles with initial recognition from leadership, setting groundwork for future sponsorship with initial awareness of regulations and risk strategy

Evolving

Efforts underway to adopt RAI principles across departments with initial steps towards stakeholder alignment, risk strategy identification and regulatory alignment

Performing

RAI principles are starting to be integrated into operations with risk strategy defined and risk appetite outlined (in alignment with applicable regulations)

Advanced


​RAI principles embedded deeply in the organisation in line with vision, strong support from executive sponsors through investments, and a mature risk strategy regularly updated

A simple white icon on a black background depicting a large central circle with a person symbol inside. Three smaller circles containing sad faces are connected to the central circle by lines, forming a triangular arrangement around the central figure.

Operating Model

Operating Model

Foundational

​Initial understanding of the need for formal governance structures with essentials roles defined and basic registry/registries for tracking AI use cases established (2.6)

Evolving

​Initial governance efforts with accountability mechanisms, basic risk management tailored to risk severity, and preliminary recruitment efforts in place

Performing

AI governance in place with pool of RAI talent, risk management process applied for most use cases and AI governance platform established with limited functionality

Advanced

​Governance with oversight and strategic decision-making supported by defined roles, ‘RAI by design’ practices and AI governance platform across the enterprise

Technical Controls

Technical Controls

Foundational


​Technical controls in early stages with existing ones being ad-hoc and manual with a scope of further development and automation

Evolving

​Controls are evolving with preliminary processes for model risk management (MRM), basic guardrails and incident response plans starting to be developed

Performing

​Control environment developed with MRM practices and technical guardrails, incl. initial efforts to monitor KRIs (in real-time as required), with documented response plans

Advanced
​

​Effective controls in-place for managing AI risks with comprehensive data integrity protocols, advanced MRM, automated monitoring of KRIs and regularly updated response plan

Third-party Ecosystem

Third-party Ecosystem

Foundational

​Established basic RAI-specific criteria for selecting third-party partners, but selection processes are still ad-hoc with protocols in early stages

Evolving
​

​Detailed selection criteria documented, with basic protocols on third-party data management being developed and siloed monitoring of applicable third-party partners

Performing

Criteria are regularly updated for third-party partner selection, with protocols for data handling supported by monitoring and auditing at consistent intervals

Advanced

Existing and future contracts include RAI-specific clauses with continuous monitoring and auditing processes (in real time, as required) for evaluating third-party performance

Change Management
and Communications

Change Management
and Communications

Foundational


​Initial thinking started towards developing training programs with awareness for building culture around RAI principles

Evolving

​Beginning basic RAI training and fostering a RAI culture with early efforts in developing communication channels

Performing

Optional training programs with a mandate for key roles established, change management incorporated into ongoing operations, and internal feedback mechanisms in place

Advanced

​Mandatory RAI training with a deeply ingrained RAI culture valuing mentorship, and highly effective internal and external communication and feedback mechanisms

Step-By-Step Guide

This guide outlines the steps companies can take to establish a foundational level of RAI maturity and offers practical recommendations on how to progress towards higher levels of maturity across the five dimensions.

Download

Best Practice Tools

In this guide, you will find supporting tools and recommendations to help companies progress on the GSMA Responsible AI Maturity Roadmap. Developed by mobile operators, each example covers a specific sub-dimension required to operate at the highest level of maturity. 

Download

RAI Roadmap Methodology

This comprehensive document offers insights into the development of the Roadmap, the importance of RAI and how to operationalise the GSMA Responsible AI Maturity Roadmap to help companies realise the full potential of their AI initiatives.

Download

Companies that have Adopted the GSMA Responsible AI Maturity Roadmap