Cybersecurity and Infrastructure Security Agency Securing AI Task Force Act

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: U.S. federal laws
• Most recent activity: Defunct
• Most recent activity date: 2025-01-03

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• AI system security vulnerabilities
• Governance failure

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Compromise of privacy
• Cyberattacks, weapon development or use
• Increased inequality and decline in employment
• Competitive dynamics
• AI pursuing its own goals
• AI possessing dangerous capabilities
• Lack of capability or robustness
• Lack of transparency or interpretability

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has minimal to good coverage of approximately 5-6 subdomains, with primary focus on AI system security (2.2), competitive dynamics (6.4), governance failure (6.5), and AI safety failures (7.1, 7.2, 7.3). Coverage is concentrated in security, governance coordination, and system safety domains.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Public Administration (excl. National Security)

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• National Security

All other sectors had no coverage in this document.

Sectors Summary

This document primarily governs AI use within the Public Administration sector, specifically within the Cybersecurity and Infrastructure Security Agency (CISA) and Department of Homeland Security. It establishes internal governance structures for federal government AI activities related to cybersecurity and infrastructure security.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding legislative act from the United States Congress with mandatory language requiring the establishment of a Task Force and specific activities, with enforcement through congressional oversight mechanisms.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: United States Congress
• Summary: The document is titled as an Act and follows standard Congressional legislative format, indicating it was proposed and enacted by the United States Congress.

Target

• Entity Types: AI_Governance_Actor
• Entities: Cybersecurity and Infrastructure Security Agency (CISA); Department of Homeland Security
• Summary: The Act specifically directs the Director of CISA to establish a Task Force and coordinate AI safety and security efforts within the Agency and Department.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Committee on Homeland Security of the House of Representatives; Committee on Homeland Security and Governmental Affairs of the Senate
• Summary: Congressional committees are designated to receive biannual briefings and reports, providing oversight and enforcement through congressional authority.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: CISA Task Force on Securing Artificial Intelligence; Committee on Homeland Security of the House of Representatives; Committee on Homeland Security and Governmental Affairs of the Senate
• Summary: The Task Force itself monitors CISA's AI activities and reports to Congressional committees, which provide external monitoring through biannual briefings.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document covers multiple AI lifecycle stages with primary focus on Design, Deployment, and Operation/Monitoring. It addresses coordination across the full lifecycle from design through deployment and ongoing monitoring of AI systems.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Systems

Technical Scope Summary

The document uses general terminology referring to 'artificial intelligence' and 'artificial intelligence-based software' without defining specific technical categories. It does not explicitly mention AI models, AI systems, frontier AI, general purpose AI, foundation models, generative AI, or compute thresholds.