The National Institute of Standards and Technology is developing a framework designed to address difficulties cybersecurity executives face in combating cyberthreats enabled by artificial intelligence, Nextgov/FCW reported.
Speaking at the RSAC Conference on Monday, Kat Megas, NIST’s cybersecurity, privacy and AI program manager, explained that the Cyber AI Profile framework will encourage organizations to focus on risk reduction, defense strategies and improved privacy to counter cyber actors using AI, including large language models, to create new attack methods such as deepfakes and enhanced phishing.
“We are at a watershed moment where everybody’s talking about how artificial intelligence is helping both the defenders as well as the attackers,” Megas said.
NIST to Seek Public Comments on Draft Framework
Cyber AI Profile is based on NIST’s Cybersecurity Framework. The agency said many in the cybersecurity community recommended developing guidance based on the CSF to address the cybersecurity risks related to AI development and use.
According to Megas, NIST is working on a public draft of the Cyber AI Profile based on initial public workshop input and additional research. The draft will be made available to the public for comment. Depending on feedback, the agency could either develop a second draft or finalize the document, which is expected to be released within the next six months.
Join the Potomac Officers Club’s 2025 Cyber Summit on May 15 in Virginia, where leading cyber experts, government decision-makers and industry executives will explore innovative solutions for a secure and resilient public sector. Register today!
