Towards an AI-based security consultant for SMEs

This research project aims to automate basic tasks of security consultants for Swiss SMEs using a data-driven approach. The architecture collects security-relevant company information to create a Digital Twin of Organization (DTO). This digital replica serves as a model where an LLM is tailored to perform a company-specific security assessment. Instructions from tools and remedial measures are analyzed via a Retrieval-Augmented Generation (RAG) system to generate concrete implementation steps. The goal is to equip Swiss SMEs with a tool to identify major risks and obtain specific actions to mitigate them.