The Organizational Transformation of Artificial Intelligence in Smart Cities: An Urban Artificial Intelligence Governance Maturity Model
Abstract
1. Introduction: The Governance Bottleneck
1.1. The Fragmentation Paradox Revisited
1.2. The Technical Framework and the Organizational Gap
1.3. The Central Challenge
1.4. Research Contribution
2. Theoretical Foundations and Literature Review
2.1. Socio-Technical Systems (STS) Theory in Urban Contexts
2.2. The Anatomy of Urban Fragmentation
2.3. Critique of Existing Maturity Models
2.4. The Research Gap
3. Methodology: Developing the UAIG
3.1. Design Science Research Approach
- Definition of Objectives for a Solution (Suggestion): To develop a maturity model that enables cities to assess their organizational readiness and define a strategic roadmap for adopting integrated AI frameworks.
- Design and Development (Development): Defining the scope, dimensions, and levels of the UAIG based on multiple data inputs and iterative refinement.
- Demonstration (Evaluation): The utility of the model was demonstrated through illustrative application to established smart city cases (Section 5). This phase confirms the artifact’s feasibility and utility in a preliminary manner.
- Communication (Conclusion): This paper serves as the communication of the developed artifact.
3.2. Data Collection and Analysis (Design Inputs)
3.3. Model Construction
4. The Urban AI Governance Maturity Model (UAIG)
4.1. Model Overview
4.2. The 5 Levels of Maturity (The Journey)
4.3. The 5 Dimensions of Capability (The Pillars)
4.4. The UAIG Matrix Visualization
5. Operationalization and Illustrative Application
5.1. The Assessment Methodology (Operationalization)
- Scoping the Assessment: Defining the boundaries of the assessment (e.g., city-wide or specific domains).
- Data Collection: Gathering evidence through stakeholder interviews, review of policy documents, and analysis of technical architectures.
- Maturity Scoring: Evaluating the collected evidence against the descriptors in the UAIG matrix in Table 2.
- Gap Analysis and Roadmap Development: Identifying gaps between the current maturity profile and the target state, facilitating the prioritization of actions.
5.2. The Governance-Technology Interlock: Synchronizing Maturity and Implementation
5.3. Illustrative Application (Demonstration of Utility)
5.4. Insights from the Demonstration
6. Discussion: Implications for Policy and Practice
6.1. The Interdependence of Governance and Technology
6.2. Actionable Recommendations for Policymakers
- Establish Centralized Leadership and Vision (D1): Create a clear, city-wide vision for integrated AI, backed by a strong political mandate. Secure sustainable funding for shared integration infrastructure.
- Empower a Chief Data Officer (CDO) and Cross-Functional Teams (D2): Establish a CDO with the authority to drive data governance across departments. Reform organizational structures to support cross-functional integration teams with shared KPIs.
- Mandate Open Standards and Interoperability (D4): Reform procurement policies to mandate adherence to open standards (e.g., NGSI-LD, OGC) and require interoperability testing (e.g., using the UAIF CIP [2]).
- Invest in Trust and Responsible AI (D5): Proactively address ethical considerations and build public trust by implementing robust AI governance frameworks (e.g., ISO/IEC 42001).
6.3. Theoretical Contributions
6.4. Limitations and Future Research
7. Conclusions
Author Contributions
Funding
Institutional Review Board Statement
Informed Consent Statement
Data Availability Statement
Acknowledgments
Conflicts of Interest
References
- Alrasbi, O.; Ariaratnam, S.T. A Meta-Analysis of Artificial Intelligence in the built environment: High-Efficacy Silos and Fragmented Ecosystems. Smart Cities 2025, 8, 174. [Google Scholar] [CrossRef]
- Alrasbi, O.; Ariaratnam, S. The Urban Systems Artificial Intelligence Framework (UAIF): An AI-Driven Engineering Blueprint for Overlaying Intelligence on Existing Urban Infrastructure. Doctoral Dissertation, Arizona State University, Tempe, Arizona, 2026. [Google Scholar]
- Albino, V.; Berardi, U.; Dangelico, R.M. Smart Cities: Definitions, Dimensions, Performance, and Initiatives. J. Urban Technol. 2015, 22, 3–21. [Google Scholar] [CrossRef]
- Mora, L.; Deakin, M.; Reid, A. Strategic Principles for Smart City Development: A Multiple Case Study Analysis of European Best Practices. Technol. Forecast. Soc. Chang. 2019, 142, 70–97. [Google Scholar] [CrossRef]
- Bibri, S.E.; Krogstie, J. Smart sustainable cities of the future: An extensive interdisciplinary literature review. Sustain. Cities Soc. 2017, 31, 183–212. [Google Scholar] [CrossRef]
- Janssen, M.; Matheus, R.; Zuiderwijk, A. Big and Open Linked Data (BOLD) for smart cities: Analyzing the barriers and developing a framework for data integration and analytics. Gov. Inf. Q. 2020, 37, 101483. [Google Scholar] [CrossRef]
- Chourabi, H.; Nam, T.; Walker, S.; Gil-Garcia, J.R.; Mellouli, S.; Nahon, K.; Pardo, T.A.; Scholl, H.J. Understanding Smart Cities: An integrative framework. In Proceedings of the 45th Hawaii International Conference on System Sciences, Maui, HI, USA, 4–7 January 2012; pp. 2289–2297. [Google Scholar] [CrossRef]
- ISACA. COBIT 2019 Framework: Introduction and Methodology; ISACA: Schaumburg, IL, USA, 2018. [Google Scholar]
- Kitchin, R. The real-time city? Big data and smart urbanism. GeoJournal 2014, 79, 1–14. [Google Scholar] [CrossRef]
- Peffers, K.; Tuunanen, T.; Rothenberger, M.A.; Chatterjee, S. A design science research methodology for information systems research. J. Manag. Inf. Syst. 2007, 24, 45–77. [Google Scholar] [CrossRef]
- Baxter, G.; Sommerville, I. Socio-Technical Systems: From Design Methods to Systems Engineering. Interact. Comput. 2011, 23, 4–17. [Google Scholar] [CrossRef]
- Kitchin, R. The ethics of smart cities and urban science. Philos. Trans. R. Soc. 2016, 374, 20160115. [Google Scholar] [CrossRef] [PubMed]
- Hughes, T.P. The evolution of large technological systems. In The Social Construction of Technological Systems: New Directions in the Sociology and History of Technology; Bijker, W.E., Hughes, T.P., Pinch, T.J., Eds.; MIT Press: Cambridge, MA, USA, 1987; pp. 51–82. [Google Scholar]
- Zuiderwijk, A.; Chen, Y.-C.; Salem, F. Implications of the use of artificial intelligence in public governance: A systematic literature review and a research agenda. Gov. Inf. Q. 2021, 38, 101577. [Google Scholar] [CrossRef]
- OASC. Minimal Interoperability Mechanisms (MIMs) Plus Technical Specifications, V4.0; Open & Agile Smart Cities (OASC): Brussels, Belgium, 2021. [Google Scholar]
- Becker, J.; Knackstedt, R.; Pöppelbuß, J. Developing maturity models for IT management—A procedure model and its application. Bus. Inf. Syst. Eng. 2009, 1, 213–222. [Google Scholar] [CrossRef]
- Caird, S.P.; Hallett, S.H. Towards a framework for evaluating the maturity of smart city strategies. Cities 2019, 89, 160–170. [Google Scholar] [CrossRef]
- Anthopoulos, L.; Reddick, C.G. Smart city maturity models: A systematic literature review. Inf. Polity 2016, 21, 169–183. [Google Scholar] [CrossRef]
- NIST. Artificial Intelligence Risk Management Framework, AI RMF 1.0; National Institute of Standards and Technology: Gaithersburg, MD, USA, 2023. [Google Scholar] [CrossRef]
- Hevner, A.R.; March, S.T.; Park, J.; Ram, S. Design science in information systems research. MIS Q. 2004, 28, 75–105. [Google Scholar] [CrossRef]
- Sipahi, E.B.; Saayi, Z. The world’s first “Smart Nation” vision: The case of Singapore. Smart Cities Reg. Dev. (SCRD) J. 2024, 8, 41–58. [Google Scholar] [CrossRef]
- Bakıcı, T.; Almirall, E.; Wareham, J. A smart city initiative: The case of Barcelona. J. Knowl. Econ. 2013, 4, 135–148. [Google Scholar] [CrossRef]
- Braun, V.; Clarke, V. Using thematic analysis in psychology. Qual. Res. Psychol. 2006, 3, 77–101. [Google Scholar] [CrossRef]
- W3C. Data Catalog Vocabulary (DCAT)—Version 3. W3C Recommendation. 22 August 2024. Available online: https://www.w3.org/TR/vocab-dcat-3/ (accessed on 14 October 2025).
- ETSI. Context Information Management (CIM); NGSI-LD API (ETSI GS CIM 009 V1.7.1); European Telecommunications Standards Institute: Sophia Antipolis, France, 2023. [Google Scholar]
- OGC. OGC API—Features—Part 1: Core. Open Geospatial Consortium. 2019. Available online: http://docs.opengeospatial.org/is/17-069r3/17-069r3.html (accessed on 14 October 2025).
- ISO/IEC 42001:2023; Information Technology—Artificial Intelligence—Management System. International Organization for Standardization: Geneva, Switzerland, 2023.
- NIST. Framework for Improving Critical Infrastructure Cybersecurity, Version 2.0 (NIST Cybersecurity Framework 2.0); National Institute of Standards and Technology: Gaithersburg, MD, USA, 2024. [Google Scholar] [CrossRef]
- Hao, L.; Zhang, S.; Schulzrinne, H. Advancing IoT System Dependability: A Deep Dive into Management and Operation Plane Separation. In Proceedings of the 2025 IEEE 11th World Forum on Internet of Things (WF-IoT), Chengdu, China, 27–30 October 2025. [Google Scholar] [CrossRef]




| Model/Framework | Focus Area | Key Limitations in the Context of Integrated Urban AI | UAIG Contribution |
|---|---|---|---|
| COBIT [8] | IT Governance and Management | Generic IT focus; lacks specificity for the socio-technical complexities of urban systems; weak on cross-departmental integration. | Provides urban-specific governance dimensions and addresses socio-technical alignment (STS theory). |
| Smart City Maturity Model (SCMM) [17] | General Smart City Development | Technocratic bias; focuses on technology deployment rather than organizational capacity and governance evolution. | Balances technical capacity (D4) with organizational structure (D2) and strategy (D1). |
| Anthopoulos & Reddick Review [18] | Literature Synthesis of Models | Confirms the fragmentation of models; notes that models often lack empirical validation or focus on specific technical architectures. | Provides a synthesis based on empirical barriers and specific technical requirements (UAIF). |
| AI-Specific Frameworks (e.g., NIST AI RMF [19]) | AI Risk Management | Focuses narrowly on risk and ethics (D5) but does not address the organizational transformation needed to implement AI systemically. | Integrates ethics and trust (D5) within a broader organizational transformation framework. |
| Dimension | L1: Ad-Hoc/Siloed | L2: Aware/Emerging | L3: Defined/Structured | L4: Integrated/Managed | L5: Optimized/Systemic |
|---|---|---|---|---|---|
| D1: Strategy & Investment | Vision is fragmented; Funding is project-based/short-term; Departmental leadership. | Emerging recognition of integration need; Initial funding for pilot studies; CIO recognizes gap. | Formal city-wide AI strategy defined; Mandated integration roadmap; Funding allocated for shared infrastructure. | Strategy actively managed and measured; Sustainable funding models operational; Centralized, empowered leadership. | Integrated vision embedded in city DNA; Continuous investment in innovation; Leadership champions systemic optimization. |
| D2: Org. Structure & Culture | Rigid departmental silos; KPIs conflict; Resistance to data sharing; No CDO. | Initial cross-departmental working groups; Data sharing is ad-hoc but encouraged; CDO role proposed. | Formal integration structures (e.g., Task Forces); Shared KPIs defined; CDO established with clear mandate. | Cross-functional teams operational; KPIs actively tracked and incentivize collaboration; Data-driven culture emerging. | Flexible, adaptive organizational structure; Shared KPIs drive system-wide outcomes; Deeply embedded data-driven culture. |
| D3: Data Governance & Policy | Data ownership is departmental; No sharing agreements; Ad-hoc data quality. | Data inventory initiated; Basic sharing principles discussed; Awareness of data quality issues. | Formal data governance framework established (e.g., DCAT); Standardized sharing agreements mandated; Data quality standards defined. | Governance framework operational and audited; Data managed as a strategic asset; Automated data quality monitoring. | Continuous improvement of governance; Policy adapts rapidly to new data sources; Automated, predictive data quality management. |
| D4: Technical Capacity & Interoperability | Proprietary systems; No interoperability standards; Limited AI skills. | Inventory of systems; Recognition of interoperability gap; Basic AI training initiated. | Open standards mandated (e.g., NGSI-LD [24], OGC [25], or equivalent); Interoperability testing required (UAIF CIP); Core AI team established. | Federated architecture operational (UAIF L1/L2); Full interoperability achieved; Advanced AI/MLOps capabilities deployed. | System-of-systems architecture (UAIF L3); Dynamic, adaptive interoperability; Leading-edge AI research and deployment. |
| D5: Trust, Ethics & Security | Security is reactive/localized; Ethical considerations absent or ad-hoc. | Awareness of AI ethics and security risks; Basic security policies in place. | Formal AI ethics framework adopted (e.g., NIST AI RMF); Security standards mandated (e.g., NIST CSF); Algorithmic transparency required. | Ethics and security actively managed and audited; Privacy-by-design implemented; Proactive cybersecurity posture. | Robust, adaptive AI ethics governance (ISO 42001); Full algorithmic accountability; System-wide, predictive security. |
| Dimension | Guiding Assessment Question (Sample) | Evidence Required for L3 (Defined/Structured) |
|---|---|---|
| D1: Strategy & Investment | Is there a documented AI strategy with a dedicated budget? | Published City AI Strategy; Line item for shared infrastructure in annual budget. |
| D2: Org. Structure & Culture | Is there a central authority for data integration? | Appointment of CDO/CIO with cross-departmental authority; Inter-agency task force minutes. |
| D3: Data Governance & Policy | Are data sharing agreements standardized? | Existence of a data marketplace or standard MOU templates used by multiple departments [23]. |
| D4: Technical Capacity & Interoperability | Are systems interoperable via open standards? | Architecture diagrams showing NGSI-LD/OGC compliance [25,26]; Successful test of API data exchange. |
| D5: Trust, Ethics & Security | Is there an AI ethics review board? | Charter of Ethics Committee; Records of algorithmic impact assessments [28]. |
| Dimension | Low Maturity (Representative City) | Medium Maturity (e.g., Barcelona) | High Maturity (e.g., Singapore) |
|---|---|---|---|
| D1: Strategy & Investment | L1: Fragmented vision, project-based funding. | L3: Clear digital strategy defined, but integration funding remains challenging. | L5: “Smart Nation” vision embedded; sustainable funding for shared infrastructure. |
| D2: Org. Structure & Culture | L1: Rigid departmental silos; conflicting KPIs. | L2: Emerging cross-departmental groups, but coordination remains inconsistent. | L4: Dedicated governance body (GovTech); shared KPIs incentivize collaboration. |
| D3: Data Governance & Policy | L1: Departmental data ownership; no sharing agreements. | L3: Strong open data mandates and standardized catalogs; governance framework established. | L4: Data governed as a city-wide asset; standardized sharing protocols operational. |
| D4: Technical Capacity & Interoperability | L1: Proprietary systems; no interoperability standards. | L3: Adoption of open standards in progress; challenges in scaling interoperability. | L4: Mandated interoperability standards; operational federated architecture. |
| D5: Trust, Ethics & Security | L1: Reactive security; ad-hoc ethical considerations. | L3: Formal security policies; emerging focus on digital rights and ethics. | L4: Proactive security posture; robust governance frameworks for responsible technology use. |
| Observed Integration (Empirical) | Level 0–1 (Siloed) | Level 1–2 (Emerging data sharing) | Level 3 (Multi-domain integration) [1,21] |
Disclaimer/Publisher’s Note: The statements, opinions and data contained in all publications are solely those of the individual author(s) and contributor(s) and not of MDPI and/or the editor(s). MDPI and/or the editor(s) disclaim responsibility for any injury to people or property resulting from any ideas, methods, instructions or products referred to in the content. |
© 2026 by the authors. Licensee MDPI, Basel, Switzerland. This article is an open access article distributed under the terms and conditions of the Creative Commons Attribution (CC BY) license.
Share and Cite
Alrasbi, O.; Ariaratnam, S.T. The Organizational Transformation of Artificial Intelligence in Smart Cities: An Urban Artificial Intelligence Governance Maturity Model. Urban Sci. 2026, 10, 63. https://doi.org/10.3390/urbansci10010063
Alrasbi O, Ariaratnam ST. The Organizational Transformation of Artificial Intelligence in Smart Cities: An Urban Artificial Intelligence Governance Maturity Model. Urban Science. 2026; 10(1):63. https://doi.org/10.3390/urbansci10010063
Chicago/Turabian StyleAlrasbi, Omar, and Samuel T. Ariaratnam. 2026. "The Organizational Transformation of Artificial Intelligence in Smart Cities: An Urban Artificial Intelligence Governance Maturity Model" Urban Science 10, no. 1: 63. https://doi.org/10.3390/urbansci10010063
APA StyleAlrasbi, O., & Ariaratnam, S. T. (2026). The Organizational Transformation of Artificial Intelligence in Smart Cities: An Urban Artificial Intelligence Governance Maturity Model. Urban Science, 10(1), 63. https://doi.org/10.3390/urbansci10010063

