Forget ChatGPT: How Industrial AI is changing the world

Hand on binary code

Could AI genuinely be as transformative as every tech booster would have you believe? The hyperscalers think so. That’s why they’re estimated to spend nearly $500bn on infrastructure this year. Yet behind these increasingly outlandish numbers lies an awkward truth: 70-80% of AI projects fail, according to the Project Management Institute. Should CTOs and CIOs keep their powder dry until the hyperbole has died down?

Not if they’re considering industrial AI projects. While generative AI (GenAI) tools in the ChatGPT/Gemini/Claude mould are having limited success in the office, large-scale deployments in factories, power plants, construction sites and other locations are already making an impact. 

According to a Reuters/Siemens report, a fifth of global organisations have already implemented industrial AI for energy management and predictive maintenance. And over 60% have done so, or are planning to in the next three years, across even more scenarios. These include supply chain optimisation, real-time operational decision making, and production process optimisation.

Citing Microsoft figures that AI could contribute £550bn to the UK economy by 2035, techUK argues that successful deployments might even catapult the UK back to the pinnacle of global manufacturing. ERP specialist IFS is emphatic. It describes this as an “invisible revolution” powering a new wave of global growth. The firm’s own study points to growing momentum. It claims that while only a third (32%) of global businesses say they’ve deeply embedded AI into workflows and decision-making today, nearly 60% expect to do so within a year. At the same time, the share of companies “experimenting” with AI is expected to drop from 24% to just 7%.

“Industrial AI is a set of solutions and approaches relevant to companies that spend a lot of time with hard assets. You have 30% of the workforce behind a desk, while 70% are out there getting their hands dirty,” says IFS chief product officer, Christian Pederson. “That separates it from the noise you hear about AI in the press, which is focused on what can be done for that 30%.”

From innovation labs to frontline operations

At its heart, industrial AI is about automating and optimising business processes to improve decision-making, enhance efficiency and increase profitability. It requires the collection of vast volumes of data from sources like IoT sensors, cameras, and back-office systems, and the application of machine and deep learning algorithms to surface insights. In some cases, the AI powers robots to supercharge automation, and in others, it utilises edge computing for faster, localised processing. Agentic AI helps firms go even further, by working autonomously, dynamically and intelligently to achieve the goals it is set.

IFS claims that a large share of the 289 UK organisations it polled are already using automation AI (57%), predictive AI (46%) and agentic AI (37%). Pederson cites one such business – which provides “washroom, healthcare and floorcare hygiene” services – that has transformed its approach to field service using industrial AI. 

The company performs more than five million service visits annually for clients, but was struggling to meet its SLAs due to persistent staff shortages, he says. By applying AI algorithms to staff schedules, client information, routing data and even electric vehicle charging telemetry, Pederson claims, it was able to drive a 40% increase in technician productivity. “You can then decide what to do with that increased productivity,” he explains. “Do you get more engagements or realise some savings? That’s obviously up to the individual company and their situation.”

Another standout case is recycling giant TOMRA. It collects large volumes of data from its recycling machines at client sites, and then applies anomaly detection algorithms to improve first-time fix rates for engineers. 

“You get the data in from IoT and you trigger that as an anomaly,” says Pederson. “You analyse the anomaly against all your historic records – other incidents that have happened with customers and how they have been fixed. You relate it to your knowledge base articles. And then you relate it to your inventory on your service vans, like which service vans and which technicians are equipped to do the job..

“So it’s the whole estate of structured, unstructured and processed data. In the past, they would send a technician out, and they could get it right 84% of the time. Now they have improved their first-time fix rate to 97%.”

Both this and the aforementioned field service deployment feature an “agentic dispatcher” which autonomously creates and publishes the schedules to the relevant service technicians, updates their calendar and suggests the best route to take. “In the very near future, AI agents will not only be helping to address work for people behind a desk, but guiding robots directly,” says Pederson.

Daniel Basile, vice-president of field service at TOMRA North America, adds that the company is also using what-if scenario planning to better manage and schedule its field resources. “It essentially offers you a test environment right within production, which saves weeks, if not months, in assessing the impact of different potential changes,” he says.

Meanwhile, an AI-powered co-pilot tool has helped the firm to reduce onboarding time by up to 50%, boosting field readiness. “Embedded AI is helping TOMRA capture knowledge from more senior technicians. Instead of just ‘what does the manual say?’ we can use AI to digitise the real experience of our most tenured technicians, to help us capture and share their knowledge,” says Basile. “Rather than an employee needing 30 minutes or an hour to sift through the information of an 800-page manual, they can ask a question and in seconds the AI will return the answer, what page(s) it’s on, and links to any supporting documents.”

Other examples abound. One is Cheer Pack, which makes pouches for various food and beverage clients. It uses AI to control robots on the factory floor, freeing staff to focus on less repetitive labour and saving millions of dollars each year. Another is Schneider Electric, which is teaming up with power system specialist ETAP. The duo are using AI-powered digital twin technology to simulate how AI factories operate. By running advanced analytics against these simulations, they can run what-if scenarios, predictive maintenance and more to improve their design.

Overcoming a human-shaped challenge

The potential benefits of successful industrial AI deployments speak for themselves. Some 91% of UK organisations IFS spoke to claim the technology has helped improve their profitability, while 95% believe it will have a positive impact on the environment. But to harness its full potential, newcomers will need to overcome some potentially sticky challenges.

The first can be expressed simply: garbage in, garbage out. Data must be clean, accurate and high quality if organisations are to emulate the likes of TOMRA and Schneider Electric. It must also be protected from tampering and theft. One study claims that a quarter (26%) of UK and US businesses suffered a data poisoning attack last year. 

Legacy technology and skills gaps also loom large. More than half of the global organisations IFS spoke to estimate that up to 60% of their workforce will need retraining for AI tools. A third says the figure could be 100%. Yet this is assuming they are willing participants on this journey. Cultural resistance is not to be underestimated, especially if workers fear their jobs may be at risk. 

“The biggest challenge with these things is not the technology, it’s the change management,” says Pederson. “Service technicians often have a years-long relationship with their dispatchers, who know the preferences of each technician. So there are challenges when you walk into this area with AI.”

Yet humans are vital to the success of such projects – not only as end users of AI, but also as supervisors. “With the use of AI in industrial environments, particularly in safety-critical settings, ensuring human oversight is embedded in processes and procedures is vital,” explains Usman Ikhlaq, AI programme manager at techUK. He’s ultimately optimistic that organisations can overcome challenges around data quality, skills, security and leadership buy-in.

“Organisations are seeing tangible results by implementing robust cybersecurity measures, enforcing strong data governance, investing in workforce upskilling, and aligning AI initiatives with strategic business objectives,” Ikhlaq explains. “When these barriers are addressed, industrial AI not only optimises real-time operations and reduces unplanned downtime, but also empowers workers to make better decisions, accelerates knowledge transfer, and enables safer, more autonomous operations in complex industrial environments.”

How far will all this innovation take British companies? TechUK is unsurprisingly bullish, citing the government’s recently published Industrial Strategy, which claims it will “prioritise frontier technologies with the greatest growth potential”, such as AI. Yet the market moves faster than government policy. IFS’s Pederson claims the firm “can’t come up with ideas quickly enough” for its customers. Against this backdrop, tech leaders who prefer to wait and see may find they’re soon left behind.

(This article first appeared on Tech Monitor)


What is PS21/3? Why time’s running out to comply with the UK’s DORA

Plenty has been written about the need for financial services firms to enhance operational resilience. But most of those column inches have until now focused on the EU’s Digital Operational Resilience Act (DORA), which came into force in January – even if many UK banks may not yet be compliant. Arguably more important for a larger number of British financial services companies is the Financial Conduct Authority (FCA)’s new Policy Statement: PS21/3.

Alongside the Prudential Regulation Authority (PRA)’s Supervisory Statement SS1/21, it forms a series of exacting new requirements for the sector that must be in place by 31 March 2025. For any organisations thinking of quietly deprioritising these efforts, a “Dear CEO” letter from the FCA in early February should focus minds.

The bottom line is that the regulator expects compliance. Fortunately, ISO 27001 can help in-scope organisations to create the culture of operational resilience that the FCA, PRA and DORA demand.

Digital change means digital risk

Like most sectors, financial services has grown steadily more dependent on digital infrastructure to stay competitive and provide the seamless online experiences that customers crave. As of 2024, some 86% of UK adults used online banking, and the figure for this and mobile banking is set to continue climbing upwards over the coming years – thanks partly to the disruptive impact of fintech firms. The UK market for these businesses is set to be worth over $24bn (£19bn) by 2029.

The challenge with the growing pace of this digital transformation is the extra risk that comes with it. An increasing reliance on technology exposes banks and other firms to a greater risk of digital extortion, primarily from ransomware, while at the same time expanding the attack surface so that breaches become almost inevitable. That’s a potentially serious reputational and financial risk. According to the International Monetary Fund (IMF)’s Global Financial Stability Report, more than 20,000 attacks on the banking sector have caused losses exceeding $12bn (£9.5bn) over the past 20 years. Additionally, “extreme losses” have more than quadrupled since 2017 to $2.5bn (£2bn).

However, cyber risk does not always stem from malicious third parties. At the end of January, a major Barclays IT outage left countless customers high and dry, unable to pay taxes, bills and mortgage payments, or even access correct information on their accounts. The fallout has been predictably torrid for the high street lender, which at the time of writing had still not explained the cause of the incident.

What the FCA wants

That’s why the FCA for one appears to be keen to increase regulatory requirements around digital operational resilience in the sector. PS21/3 demands that banks, building societies, insurers, payment providers and others get the following in order before the end of March:

  • Identify the organisation’s most important business services and keep them regularly under review
  • Set impact tolerances for each of these services and regularly review them
  • Identify and document the people, processes, technology, facilities, and information needed to deliver key services. This includes any supplier relationships which could impact the organisation’s ability to remain within impact tolerance limits
  • Develop testing plans which describe how the organisation can remain within impact tolerances for each “important business service” – identifying plausible scenarios aligned to risks and vulnerabilities. This will help senior managers ensure vulnerability remediation plans are appropriately funded
  • Develop and test incident response plans
  • Deliver a self-assessment in line with handbook guidance to the relevant governing body. This should highlight the organisation’s journey to operational resilience, including an overview of vulnerabilities found, scenarios tested (plus their outcome), remediation plans, and the overall strategy for remaining within impact tolerances for all important business services
  • Regular horizon scanning to help understand new and emerging risks, and ensure the right controls are in place to detect, respond to and recover from operational disruptions

The FCA has already published some observations on current compliance efforts, which it says should help to guide financial services companies as they assess readiness and finalise PS21/3 plans. The regulator is particularly keen to ensure that third-party risk is continuously and actively managed by in-scope companies, including through testing where appropriate. And that remediation plans are fully funded. It also demands that complying organisations do not treat PS21/3 as a “once and done activity”, but instead embed its requirements into corporate culture.

How ISO 27001 can help

This is where ISO 27001 comes into its own. According to ISMS.online chief product officer, Sam Peters, there’s alignment between the standard and PS21/3 in multiple key areas, including:

Governance and Accountability

Both emphasise leadership accountability in setting and overseeing resilience strategies.

Impact Tolerance and Risk Management

Both require risk-based decision-making and setting risk thresholds to maintain resilience.

Testing and Scenario Analysis

Both require regular testing to assess and improve operational resilience so that organisations can handle disruptions effectively.

Third-Party Risk Management

Both require due diligence on third parties, although ISO 27001 provides a structured approach for managing supplier security risks.

Incident Reporting and Response

Both require incident response planning, although “ISO 27001 goes further by ensuring incident handling is documented, monitored, and improved over time,” according to Peters.

Continuous Improvement and Learning from Disruptions

Both emphasise learning from disruptions to continuously enhance resilience.

“Firms using ISO 27001 already have a solid foundation for meeting FCA resilience requirements, especially in risk management, incident response and continuous improvement,” says Peters. “By leveraging ISO 27001, financial services firms can strengthen compliance with FCA rules while enhancing their overall security posture and resilience.”

As mentioned, the new FCA rules also share core principles around operational resilience with DORA. This includes greater leadership accountability, third-party resilience, improved incident response, and “mapping critical services, identifying vulnerabilities, and setting risk thresholds,” says Peters. Although the two regimes differ in terms of scope and enforcement, this offers an opportunity for UK financial firms operating in the EU to align FCA operational resilience strategies with DORA’s, using ISO 27001 as a foundation.

This will ultimately “help streamline compliance efforts and reduce regulatory risks”, Peters concludes.

This article was originally published on ISMS.online.