The National Institute of Standards and Technology (NIST) is advancing a “Community Profile” to guide organizations in securing and defending artificial intelligence systems.
According to Katerina Megas, cybersecurity for Internet of Things program manager at NIST, the forthcoming Cyber AI profile, built on the NIST Cybersecurity Framework, will address security risks in AI use and development while aligning with other standards.
Following NIST’s first Cyber AI workshop on July 31, Megas said the profile will take a broad view of AI systems, from data and models to application stacks. “It is an absolute must that organizations look at adopting AI for cyber defense, because we do know that it is being used more and more for offensive techniques,” Megas said at the DGI’s 930gov event.
Workshop feedback emphasized operational tools, automation, supply chain risk, and incident response. Transparency, workforce education, and data protection will also be priorities. NIST aims to bridge gaps between AI and cybersecurity communities, organizing existing guidance rather than creating rules from scratch.