CISA and Industry Partners Conduct AI Cybersecurity Drill

The Cybersecurity and Infrastructure Security Agency (CISA) held its first-ever tabletop exercise in collaboration with the private sector, aimed at enhancing coordinated responses to cybersecurity incidents involving artificial intelligence (AI). 

More than 50 AI experts from both government agencies and industry partners convened at the Microsoft Corp. facility in Reston, Virginia, for this initiative.

Conducted over four hours, the exercise was orchestrated by the Joint Cyber Defense Collaborative (JCDC), a public-private partnership established by CISA.

The JCDC facilitates joint planning and operational collaboration across sectors. The simulation focused on a cybersecurity incident linked to an AI-enabled system, guiding participants through protocols for operational collaboration and information sharing among the represented organizations.

“This exercise marks another step in our collective commitment to reducing the risks posed by AI. It also highlights the importance of developing and delivering AI products that are designed with security as the top priority. As the national coordinator for critical infrastructure security and resilience, we’re excited to work with our partners to build on this effort to help organizations secure their AI systems,”  said CISA Director Jen Easterly.

The tabletop exercise contributes to the development of the Security Incident Collaboration Playbook led by JCDC.AI, a specialized initiative under JCDC. 

This effort aims to establish an operational network comprising AI providers, AI security vendors, and essential infrastructure operators. Its focus is on addressing risks, threats, vulnerabilities, and mitigation strategies specific to AI-enabled systems within critical national infrastructure.

The playbook, slated for publication by year-end, will facilitate AI security incident response coordination efforts between government, industry, and global partners.