James M. Inhofe National Defense Authorization Act for Fiscal Year 2023, Section 835 ("Curricula on software acquisitions and cybersecurity software or hardware acquisitions for covered individuals")

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: NDAA provisions;U.S. federal laws
• Most recent activity: Enacted
• Most recent activity date: 2022-12-23

Risk subdomain coverage

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• AI system security vulnerabilities
• Cyberattacks, weapon development or use

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

This document has minimal to no coverage of AI risk domains. It is a training mandate focused on enhancing digital literacy for defense acquisition personnel, including AI/ML topics, but does not address specific AI risks, harms, or mitigation measures. The document is procedural and educational in nature rather than risk-focused.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• National Security

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Educational Services

All other sectors had no coverage in this document.

Sectors Summary

This document primarily governs the National Security sector by mandating training curricula for defense acquisition personnel. It does not regulate AI use across multiple economic sectors but rather focuses on enhancing the capabilities of government personnel involved in defense-related software and cybersecurity acquisitions.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding federal statute enacted by the U.S. Congress as part of the National Defense Authorization Act for Fiscal Year 2023. It contains mandatory obligations using 'shall' language and creates legally enforceable requirements for the Defense Acquisition University and the Secretary of Defense.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: United States Congress; Committees on Armed Services of the Senate and House of Representatives
• Summary: This section is part of the James M. Inhofe National Defense Authorization Act for Fiscal Year 2023, which is enacted by the United States Congress. The document header identifies Congress as the authority.

Target

• Entity Types: AI_Governance_Actor
• Entities: Defense Acquisition University; covered individuals (individuals serving in positions designated under section 1721(b) of title 10, United States Code, who are regularly consulted for software acquisitions or cybersecurity software or hardware acquisitions)
• Summary: The document explicitly targets the President of the Defense Acquisition University who must develop and offer curricula, and 'covered individuals' who are defense acquisition personnel regularly involved in software and cybersecurity acquisitions.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Committees on Armed Services of the Senate and House of Representatives; Congress
• Summary: The Congressional Committees on Armed Services receive plans and reports for oversight purposes, and Congress maintains enforcement authority through its legislative and appropriations powers.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Committees on Armed Services of the Senate and House of Representatives; Secretary of Defense; Congress
• Summary: The Committees on Armed Services and Congress monitor implementation through required plan submissions and reports. The Secretary of Defense is required to assess and report on costs and benefits of the curricula.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design

AI Lifecycle Summary

The document does not directly govern specific AI lifecycle stages but rather mandates training curricula that covers information about AI and ML technologies. The training is intended to increase digital literacy for acquisition personnel, which indirectly relates to planning and procurement decisions across multiple lifecycle stages.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• AI Systems

Technical Scope Summary

The document explicitly mentions artificial intelligence and machine learning as topics to be covered in the training curricula. However, it does not define these terms or distinguish between different types of AI systems, models, or capabilities. The focus is on providing information about these technologies rather than regulating specific AI technical approaches.