National Defense Authorization Act for Fiscal Year 2024, Section 811 ("Modernizing the Department of Defense requirements process")

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: NDAA provisions;U.S. federal laws
• Most recent activity: Enacted
• Most recent activity date: 2023-12-22

Risk subdomain coverage

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Competitive dynamics

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

This document has minimal to no coverage of AI risk domains. It is a procedural/administrative reform focused on streamlining DoD requirements processes, with brief mentions of AI as a capability area requiring rapid iteration. It does not address AI-specific risks, harms, or safety concerns from the MIT taxonomy.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• National Security

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Scientific Research & Development Services

All other sectors had no coverage in this document.

Sectors Summary

This document exclusively governs the National Security sector, specifically the Department of Defense and its military departments. It establishes requirements processes for defense acquisition including AI capabilities for military applications.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding federal statute enacted by the United States Congress as part of the National Defense Authorization Act for Fiscal Year 2024. It contains mandatory requirements with specific deadlines and reporting obligations enforceable through congressional oversight and administrative mechanisms.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: United States Congress
• Summary: The document is Section 811 of the National Defense Authorization Act for Fiscal Year 2024, which is enacted by the United States Congress as the legislative authority.

Target

• Entity Types: AI_Governance_Actor
• Entities: Department of Defense; Secretary of Defense; Vice Chairman of the Joint Chiefs of Staff; Secretaries of the military departments; commanders of the combatant commands; Under Secretary of Defense for Acquisition and Sustainment; military departments; Armed Forces
• Summary: The document explicitly targets Department of Defense entities and personnel, requiring them to develop and implement streamlined requirements processes. The military departments and various DoD leadership positions are specifically named as responsible parties.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: congressional defense committees; United States Congress
• Summary: The congressional defense committees serve as the enforcement body through mandatory reporting requirements and oversight mechanisms. The Secretary of Defense must submit reports to these committees, establishing accountability.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: congressional defense committees; Secretary of Defense
• Summary: The congressional defense committees monitor implementation through required interim and final reports. The Secretary of Defense also has monitoring responsibilities through the reporting process and continuous improvement requirements.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document addresses multiple AI lifecycle stages with primary focus on Plan and Design, Build and Use Model, and Deploy stages. It emphasizes rapid, iterative requirements processes for AI systems and integration with acquisition frameworks, while also requiring continuous improvement during operation.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

No technical scope terms identified.

Technical Scope Summary

The document explicitly mentions AI, software, and data as capability areas requiring specialized requirements processes. It does not define specific AI types (frontier, general purpose, task-specific, etc.) or mention compute thresholds, foundation models, or open-weight models. The focus is on procedural requirements for AI acquisition rather than technical AI specifications.