Servicemember Quality of Life Improvement and National Defense Authorization Act for Fiscal Year 2025, Section 6504 ("Establishment of Artificial Intelligence Security Center")

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: FY2025 NDAA;NDAA provisions
• Most recent activity: Enacted
• Most recent activity date: 2024-12-23

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• AI system security vulnerabilities

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Cyberattacks, weapon development or use
• Competitive dynamics
• Lack of capability or robustness

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 3-4 subdomains, with strong focus on AI system security (2.2), malicious actors using AI for cyberattacks (4.2), and competitive dynamics in national security contexts (6.4). Coverage is concentrated in security and defense-related risk domains.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• National Security

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Professional & Technical Services
• Scientific Research & Development Services

All other sectors had no coverage in this document.

Sectors Summary

The document primarily governs the National Security sector, with secondary coverage of Professional and Technical Services (cybersecurity) and Scientific Research and Development Services (AI security research). The focus is on protecting AI systems used in national security contexts and the defense industrial base.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding federal statute enacted by the United States Congress as part of the National Defense Authorization Act for Fiscal Year 2025, with mandatory language establishing legal obligations and specific implementation timelines.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: United States Congress
• Summary: The document is Section 6504 of the Servicemember Quality of Life Improvement and National Defense Authorization Act for Fiscal Year 2025, which is enacted by the United States Congress as the legislative authority.

Target

• Entity Types: AI_Governance_Actor, AI_Developer, AI_Deployer
• Entities: National Security Agency; managers of national security systems; elements of the defense industrial base
• Summary: The document targets the Director of the National Security Agency who must establish the Center, and the Center's functions include promoting secure AI adoption practices for managers of national security systems and defense industrial base elements.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Director of the National Security Agency; congressional intelligence committees
• Summary: The Director of the National Security Agency has the authority to establish and operate the Center, while congressional intelligence committees provide oversight through mandatory reporting requirements.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: congressional intelligence committees; Artificial Intelligence Security Center
• Summary: Congressional intelligence committees monitor implementation through mandatory reporting requirements, while the Center itself monitors and develops guidance on counter-AI techniques and secure AI adoption practices.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily focuses on the Deploy and Operate and Monitor stages of the AI lifecycle, with emphasis on secure deployment practices and ongoing monitoring of AI systems against counter-AI techniques. It addresses security considerations throughout the operational lifecycle of AI systems in national security contexts.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• AI Systems

Technical Scope Summary

The document explicitly mentions AI systems and focuses on their security characteristics, particularly regarding counter-AI techniques. It does not specify particular types of AI (frontier, general purpose, task-specific, etc.) or mention compute thresholds, foundation models, or open-weight models.