HR 6530 AI Training for National Security Act 2025 (Training on AI cybersecurity for the Armed Forces and the Department of Defense)

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: U.S. federal laws
• Most recent activity: Proposed
• Most recent activity date: 2025-12-09

Risk subdomain coverage

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• AI system security vulnerabilities
• Cyberattacks, weapon development or use

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has minimal coverage of approximately 2 subdomains, with focus on AI system security vulnerabilities (2.2) and cyberattacks in the context of national security (4.2). Coverage is concentrated in the security and malicious actors domains, specifically addressing cybersecurity training needs for military and DoD personnel.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• National Security

All other sectors had no coverage in this document.

Sectors Summary

The document exclusively governs the National Security sector, specifically targeting the Armed Forces and Department of Defense personnel. The training mandate applies to military and civilian employees within the national defense establishment, addressing AI cybersecurity challenges in this critical security context.

Legislative Status

Hard Law

Legislative Status Summary

This is a Congressional bill that uses mandatory language ('shall revise') and, once enacted, will create binding legal obligations for the Department of Defense. It represents formal federal legislation from the United States Congress.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: United States Congress
• Summary: The document is a Congressional bill ('A BILL' enacted by 'the Senate and House of Representatives of the United States of America in Congress assembled'), indicating that the United States Congress is the proposing authority.

Target

• Entity Types: AI_User, Affected_Stakeholder
• Entities: Members of the Armed Forces; Civilian employees of the Department of Defense
• Summary: The bill explicitly requires revised training for 'members of the Armed Forces and civilian employees of the Department of Defense,' who are the direct targets receiving the mandated AI cybersecurity training.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Secretary of Defense; Chief Information Officer of the Department of Defense
• Summary: The bill assigns implementation responsibility to the Secretary of Defense, acting through the Chief Information Officer of the Department of Defense, who must revise and implement the training requirements.

Monitor

• Summary: The document does not explicitly identify any monitoring body or oversight mechanism for tracking implementation or compliance with the training requirements.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Operate and Monitor

AI Lifecycle Summary

The document primarily addresses the Operate and Monitor stage of the AI lifecycle, as it mandates training for personnel who will work with AI systems in operational contexts, specifically focusing on cybersecurity challenges during ongoing use of artificial intelligence systems.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Systems

Technical Scope Summary

The document references 'artificial intelligence' and its 'use' in general terms without distinguishing between AI models, systems, or specific types. It does not define AI or specify particular categories such as frontier AI, general purpose AI, or foundation models. No compute thresholds or model characteristics are mentioned.