AI for National Security Act

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: U.S. federal laws
• Most recent activity: Defunct
• Most recent activity date: 2025-01-03

Risk subdomain coverage

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• AI system security vulnerabilities
• Cyberattacks, weapon development or use

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has minimal coverage of risk domains, with primary focus on AI system security (2.2) and malicious actors/cyberattacks (4.2). Coverage is limited to brief mentions in the context of national security and cyber defense, with no detailed governance measures or risk mitigation strategies described.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• National Security

All other sectors had no coverage in this document.

Sectors Summary

This document exclusively governs the National Security sector, specifically addressing the Department of Defense's procurement of AI-based cybersecurity products and services. No other economic sectors are regulated by this legislation.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding legislative amendment to the National Defense Authorization Act with mandatory language requiring Department of Defense procurement actions.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: United States Congress
• Summary: The document is an Act of Congress, as indicated by the legislative format and reference to Public Law. Congress is the proposing authority for this amendment to the National Defense Authorization Act.

Target

• Entity Types: AI_Governance_Actor, AI_Deployer
• Entities: Department of Defense
• Summary: The Act specifically targets the Department of Defense's procurement activities, requiring them to procure AI-based endpoint security and enhance software supply chain security.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Department of Defense
• Summary: The Department of Defense is implicitly the enforcer as the entity responsible for implementing the procurement requirements established by this amendment. As a federal agency, it has authority to enforce compliance within its organizational structure.

Monitor

• Entity Types: AI_Governance_Actor
• Summary: No specific monitoring body is explicitly named in this brief amendment. Monitoring would likely fall to standard Department of Defense oversight mechanisms and Congressional oversight, but these are not explicitly mentioned in the document.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document focuses primarily on the procurement and deployment of AI-based endpoint security systems within the Department of Defense. It addresses the Deploy stage through procurement requirements and implicitly touches on Operate and Monitor through references to ongoing security functions.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Systems
• Task-specific AI

Technical Scope Summary

The document explicitly mentions artificial intelligence in the context of endpoint security systems but does not provide detailed definitions or distinguish between different types of AI. It focuses on AI-based security applications rather than AI models or systems more broadly.