Promoting Advanced Artificial Intelligence Innovation and Security

• Authority: Executive Office of the President
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: Editors' Picks;U.S. regulations, executive orders, and agency policies
• Most recent activity: Enacted
• Most recent activity date: 2026-06-02

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• AI system security vulnerabilities
• Cyberattacks, weapon development or use
• AI possessing dangerous capabilities

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Fraud, scams, and targeted manipulation
• Competitive dynamics

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 5-6 subdomains, with strong focus on AI system security (2.2), malicious actors using AI for cyberattacks (4.2), fraud and criminal manipulation (4.3), competitive dynamics (6.4), and dangerous capabilities (7.2). Coverage is concentrated in security, misuse prevention, and AI safety domains related to cybersecurity threats.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Public Administration (excl. National Security)
• National Security

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Trade, Transportation & Utilities
• Information
• Finance & Insurance
• Scientific Research & Development Services
• Health Care & Social Assistance

All other sectors had no coverage in this document.

Sectors Summary

This Executive Order primarily governs AI use in Public Administration (excluding National Security) and National Security sectors, with extensive coverage of federal government cybersecurity systems. It also has minimal coverage of Finance and Insurance, Health Care, and Trade/Transportation/Utilities sectors through references to critical infrastructure operators like community banks, rural hospitals, and local utilities.

Legislative Status

Hard Law

Legislative Status Summary

This is an Executive Order issued by the President of the United States with binding legal authority over federal agencies. It contains mandatory directives with specific timelines and enforcement mechanisms.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Summary: The document is an Executive Order issued by the President, as stated in the opening line and throughout the document's authority structure.

Target

• Entity Types: AI_Governance_Actor, AI_Developer, AI_Infrastructure_Provider
• Summary: The document targets multiple federal agencies with mandatory cybersecurity requirements, and establishes voluntary collaboration frameworks with AI developers and critical infrastructure operators. The AI industry is explicitly mentioned as a target for voluntary engagement regarding frontier models.

Enforcer

• Entity Types: AI_Governance_Actor
• Summary: Multiple federal agencies and officials are designated with enforcement authority, including the Attorney General for criminal law enforcement and various agency heads for implementing cybersecurity directives and operational requirements.

Monitor

• Entity Types: AI_Governance_Actor
• Summary: The document establishes monitoring mechanisms through CISA for civilian systems, NSA for classified benchmarking of AI capabilities, and creates an AI cybersecurity clearinghouse to coordinate vulnerability scanning and remediation.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily focuses on the Deploy and Operate and Monitor stages of the AI lifecycle, with emphasis on secure deployment of frontier models and ongoing cybersecurity monitoring. It also addresses aspects of Verify and Validate through classified benchmarking processes for AI model capabilities.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• Frontier AI
• AI Systems

Technical Scope Summary

The document explicitly mentions AI models, AI systems, and frontier models (covered frontier models). It establishes a classified benchmarking process to assess advanced cyber capabilities of AI models and sets thresholds for frontier model designation. The document focuses on AI-enabled cybersecurity capabilities and does not explicitly mention compute thresholds, open-weight models, general purpose AI, task-specific AI, generative AI, or predictive AI.