U.S. AI Action Plan Sets Out Security Measures for AI Systems

· Original article ↗

Summary

The U.S. AI Action Plan calls for measures including an AI-ISAC, AI vulnerability guidance, secure-by-design practices, incident-response frameworks, and research into frontier AI risks. Wiz urges security across AI development and deployment.

Key points

  • The plan calls for DHS to establish an AI Information Sharing and Analysis Center to share AI-security threat information across critical infrastructure sectors.
  • DHS is also tasked with guidance on responding to AI-specific vulnerabilities and threats, and sharing information on known AI vulnerabilities.
  • The plan directs agencies to work with AI developers and others to protect AI innovations, including through an AI hackathon to test security and other properties.
  • DoD and NIST are tasked with continuing work on AI frameworks, roadmaps, and toolkits; the plan also calls for AI incident-response frameworks and updated federal playbooks.
  • The plan calls for research into security vulnerabilities and adversarial use of foreign AI, and recognizes legal and societal challenges from deepfakes.
  • Wiz argues that organizations should secure the broader systems in which AI is deployed, with continuous visibility and risk management across development and production.

Article Details

Event Type
U.S. AI Action Plan and accompanying Executive Orders outline federal initiatives for AI development, infrastructure, and security.
Impact
The plan calls for stronger security across AI development and deployment, including secure-by-design practices, vulnerability information sharing, incident-response guidance, and protections for critical infrastructure. Wiz estimates that 85 percent of cloud environments already leverage AI technologies, increasing the importance of managing security risks as adoption expands.

Vendors

Products

Industries

Related Articles