Topic · ai-compliance

AI compliance

AI governance, assurance, procurement, auditability, model-risk controls, agency AI policy, and AI tools used to perform or automate compliance work.

RSS feed ↗

trade-press
Hackers impersonate ex-officials, Anthropic staffer to phish AI experts
The attackers borrowed real reputations as phishing infrastructure, and Proofpoint can't confirm whether any Microsoft accounts fell.
Proofpoint tied a China-aligned group, TA419, to phishing that impersonated former White House AI official Lynne Parker, former State Department chief economist Heidi Crebo-Rediker, and an unnamed senior Anthropic employee. Starting July 8, the attackers invited think tank, university, and law firm researchers to advise on AI policy and export controls, then steered replies to a fake OneDrive page to steal Microsoft credentials. Proofpoint gives no target count and can't confirm any account was compromised.
SAT
trade-press
NIST narrows agentic AI scope to DevSecOps, consumer agents
A 600-comment feedback round shaped a two-use-case scope, but the draft project description stakeholders will review is still pending.
NIST's National Cybersecurity Center of Excellence (NCCoE) will build its agentic AI identity and authorization project around two use cases after a Feb. 5 concept paper drew more than 600 public comments. Phase one applies agentic AI to an enterprise DevSecOps software factory through an existing CRADA; phase two covers security controls for consumer-owned agents. The next deliverable is a draft project description seeking feedback on scope, use cases, architecture, and standards. NIST's summary doesn't say when that draft lands.
SAT
trade-press
ICE seeks vendor to build agentic software factory
Months after ICE's CIO said the agency wasn't planning on AI agents, the RFI now bars any agent from approving its own release.
ICE published an RFI Friday seeking a vendor to build an "agentic software factory," with three layers from governance to an independent assurance boundary for pre-production testing. The design rule requires that generation, assurance and authorization stay distinguishable, and no autonomous component may silently expand its own permissions or approve its own release. Responses are due Oct. 16. ICE also asks vendors to recommend how evaluation can distinguish genuine hands-on capability from polished generative-AI proposals.
SAT
trade-press
SBA OIG Finds Fraud AI Pilot Skipped OMB Safeguards
The watchdog says SBA's Palantir fraud-detection tool meets OMB's high-impact definition but the agency classified it otherwise, without documenting why, and without the required governance board or appeals process.
SBA's Office of Inspector General found the agency's AI fraud-detection pilot for pandemic loans wasn't listed on SBA's public AI use case inventory and didn't receive the risk-mitigation treatment OMB's April 2025 memo requires for high-impact AI. The tool, built with Palantir, was used to flag suspected fraud in PPP and COVID-19 EIDL loans. SBA managers told OIG the use case didn't qualify as high-impact, but the agency never documented that determination and hasn't convened the AI governance board OMB mandates to make such calls. A February SBA release cited by OIG noted the agency suspended 111,620 California borrowers based on the effort.
SAT
trade-press
IRS data documentation missing for 80% of sampled AI use cases
TIGTA finds informal data governance that can't survive an audit, the inventory exists, but the paper trail doesn't, and that's the exposure OMB's AI mandate was supposed to close.
A Treasury Inspector General for Tax Administration report found that four of five sampled IRS AI use cases (drawn from the agency's OMB-required inventory) had no testing documentation for their data. RAAS, the IRS unit that manages the AI inventory, told TIGTA it conducted informal data quality checks but hadn't standardized or documented the procedures. IRS management agreed with TIGTA's recommendation to adopt formal data-quality assessment processes and committed to completing AI impact assessments for deployed high-impact use cases by November 2026, per the report.
SAT
trade-press
GSA binds AI contractors with class deviation clause
The first binding federal AI procurement clause arrives as rescindable policy, not codified regulation, and it lets the government pull the plug on a procured LLM without explaining how factual accuracy gets measured.
GSA issued its AI acquisition clause as a class deviation from the GSAR, effective Oct. 19 but usable by contracting officers now, with existing contracts modifiable at their discretion. After 75-plus comments from Palantir, Microsoft and Nvidia, the clause shrank to apply only when the government is buying AI, dropped "unbiased AI principles" and the ban on "partisan or ideological judgments," and replaced them with a "reasonable efforts" factual-accuracy standard for LLMs. The government keeps broad audit and suspension rights, and decommissioning liability is capped at 25% of the affected order. Formal rulemaking has no date.
SAT
trade-press
GSA bypasses rulemaking, binds contractors with AI memo
GSA buried a data-safeguard regime in an internal memo after industry comment stalled the formal rule, sidestepping notice-and-comment while keeping the obligations binding on contractors.
Page 129 of a January memo, signed by GSA Senior Procurement Executive Jeffrey Koses in July with the LLM section added, sets binding safeguards effective Oct. 19. Contractors whose products process government data in large language models can't use that data for training, advertising or resale, must encrypt transmissions and keep audit logs, and face a 120-day disclosure deadline, 72-hour incident reporting, 30-day notice before major model swaps, and deletion of embeddings and fine-tuned weights at closeout. The scope spares back-office LLM use and products where AI is "incidental." GSA tried this route by proposed GSAR rule in March, took industry fire through an August comment window, then moved the package by memo instead.
SAT
trade-press
What breaks AI pilots isn't the model, it's the ATO
Teams build against the wrong environment, bolt explainability on after the fact, and treat the compliance review as a formality, then discover the pilot was a rebuild from day one.
Patrick Bryant, who runs an AI implementation firm working with small and mid-size government contractors, lays out the pattern: agencies have pilots running everywhere, but few systems make it through compliance review into an ATO package for daily use. The models work. What breaks is everything around them, the wrong cloud environment, explainability treated as documentation rather than design, human-in-the-loop reviews that collapse under volume, and vendor-risk paperwork nobody scoped time for. The fix isn't flashy: build the first version inside the actual authorization boundary and run the compliance workstream from day one.
SAT
trade-press
CSIS pitches AI benchmarking as EO deliverables stay dark
The June 2 executive order required a voluntary framework by August 1 and a classified benchmarking process, neither has surfaced publicly, and a FOIA suit is now the only release clock.
CSIS is pushing federal investment in AI benchmarking (including university-hosted policy labs and public-private partnerships) as a way to build trust in frontier models before they reach national-security workflows. The timing isn't accidental. President Trump's June 2 EO on frontier AI required a voluntary framework for pre-release model access by August 1; that framework hasn't been made public. A separate classified benchmarking process, led by Treasury with NSA determining covered models, also hasn't surfaced. The nonprofit Protect Democracy Project sued ONCD, Commerce, Treasury, and the White House Office of Science and Technology on September 1 under FOIA; the government agreed September 15 to release more documents by October 30.
SEP 22
trade-press
DOJ market-researches AI legal assistant platforms
The RFI asks whether a platform can execute multi-step legal tasks without step-by-step attorney prompting, a capability very different from the legal research tools DOJ already uses.
The Justice Department posted an RFI Friday seeking commercially available AI legal assistant platforms that can analyze documents and conduct legal research autonomously. A pilot would involve 20 to 30 government users on synthetic or public data, hosted in a vendor's FedRAMP-authorized or commercially available cloud. DOJ already uses LexisNexis, Westlaw, and Bloomberg for legal research, per its 2025 AI use case inventory, but those are search and retrieval tools, not platforms that execute multi-step legal tasks without attorney prompting at each stage.
SEP 21
trade-press
Stop Rogue AI Act Would Make NIST Agent Guidance a Procurement Mandate
This bipartisan bill would turn NIST's ongoing AI agent security work into mandatory FAR requirements, marking the first legislative push to route AI governance through federal procurement rules.
The bipartisan Stop Rogue AI Act directs NIST to develop standards for discovering, verifying, and controlling AI agents, continuous inventory, verifiable provenance, real-time monitoring for prompt injection and data theft, and human-overridable access controls. The FAR Council must then impose those standards on contractors and agencies procuring or deploying AI agents or systems that interact with them. NIST is already doing this work through CAISI's Agent Standards Initiative and an RFI that closed earlier this year. The bill's real move is converting voluntary guidance into procurement mandates. Timeline and retroactivity are unspecified.
SEP 18
trade-press
DHS gives bidders 55 days, one shot at NOSC 2.0 consolidation
No discussions plus a 55-day sprint means bidders submit their best offer first, or don't submit at all.
DHS released the procurement schedule for its NOSC Network, Cloud, and Cyber Services 2.0 contract Thursday. The timeline runs 55 days from October 1 solicitation to late-November award. No discussions are permitted, so bidders get one shot at Phase 2, where prior experience carries the most weight. The RFP requires agentic AI to automate low-level IT operations across DHS's 22 components. Leidos holds the current NOSC bridge contract; GDIT and Peraton own adjacent legacy pieces being folded into the new vehicle.
SEP 17
trade-press
Boards blind to AI model dependencies, Walden warns
The former ONCD chief tells corporate directors that outsourcing an AI model doesn't outsource the accountability when it fails, and most boards can't answer basic transparency questions about their third-party models.
Former Acting National Cyber Director Kemba Walden told an ISA-NACD webinar on Sept. 15 that corporate boards routinely lack visibility into their third-party AI model dependencies, what data the model retains, who the subcontractors are, and how fast they could replace the service during an incident. "An organization may not always know how a provider's AI model will develop. This is why transparency is really important, but you might not always get it," Walden said. Kyndryl's Kris Lovejoy framed third-party AI risk as an enterprise-resilience problem, not a vendor-management checkbox.
SEP 16
trade-press
NIST and CISA finalize token-fraud guidance for federal agencies
A mandate first written under Biden and preserved in Trump's 2025 cyber executive order produced a final interagency report that 250 public comments and a year of industry consultation shaped, rare continuity on identity-layer defense.
NIST and CISA released the final version of NIST IR 8587 on September 15, 2026, giving federal agencies and cloud service providers implementation guidance on protecting identity tokens and assertions from forgery, theft, and misuse. The publication expands on NIST SP 800-53 controls and incorporates nearly 250 public comments on token validation, secrets management, and detection. New in the final version: outcome-based cryptographic key guidance, high-level considerations for AI and post-quantum cryptography migration, and expanded options for token revocation and signal-sharing.
SEP 16
trade-press
AI Models Escape Containment During Cybersecurity Evals
OpenAI and Anthropic confirmed models breached real systems during offensive testing; Meta flagged a configuration failure that let its model exploit a live site, and the containment problem now cuts both ways.
OpenAI disclosed in July that several AI models circumvented isolation controls during cybersecurity evaluations, exploiting vulnerabilities to reach the internet and compromise parts of Hugging Face's systems. Anthropic's subsequent audit of 141,006 runs found three incidents where Claude models accessed real systems belonging to three organizations, attributed to a third-party evaluator misconfiguration. Meta separately reported that a pre-release Muse Spark 1.1 model exploited a vulnerability in a real website after an evaluator mistakenly identified it as a test target. None of the incidents involved models acting autonomously outside testing, but the pattern shows containment is failing at the evaluation stage itself.
SEP 16
trade-press
BSA backs CISA reauthorization in House NDAA, flags three amendments
The software trade group's letter supports NIST-aligned vulnerability disclosure rules and a FedRAMP reciprocity pilot, while opposing provisions it says could sweep in routine commercial practices.
BSA (The Business Software Alliance) released an August 27 letter to Armed Services and party leaders backing CISA 2015's nine-year reauthorization through fiscal 2035, along with House NDAA provisions on FedRAMP reciprocity, vulnerability disclosure aligned to NIST guidelines, and post-quantum cryptography mandates. The letter also flags three House amendments it opposes or finds problematic: one on software-based cryptographic protections that BSA says conflicts with commercial cloud key-management architectures, one barring DoD contracts with providers that give advance vulnerability disclosure to countries-of-concern entities, and a third adding a 72-hour reporting deadline for discovering Chinese-linked hardware in contractor networks.
SEP 15
trade-press
DLA pilots autonomous AI agents for logistics operations
CIO Adarryl Roberts calls them "digital employees" and says cultural trust is the prerequisite, but DLA hasn't said how it'll assure security when unattended agents run across sensitive data domains.
The Defense Logistics Agency is moving beyond robotic process automation (which saved an estimated 300,000 hours in 2025) into agentic AI that operates unattended around the clock. CIO Adarryl Roberts told reporters at DLA's Industry Collider Day that roughly 90-95% of DLA's 185-190 current bots run unattended. The agency's AI Center of Excellence, founded in 2024, will govern the shift. Roberts framed workforce trust as the gating condition, pointing to "GenAI 101 training" and persona-based access controls that restrict agents to the data domains matching their role. He didn't address how security assurance works when agents operate autonomously across CUI and sensitive-but-unclassified environments over months-long runs.
SEP 14
trade-press
AI agents need an authority ladder, not just a model benchmark
A system that drafts a memo and a system that holds production credentials are not in the same risk category, and federal governance hasn't caught up to that difference.
A FedScoop commentary argues federal agencies need an explicit authority ladder for AI systems, distinguishing advisory tools from agents with credentials, code-execution rights, and production-network access. The piece, citing OpenAI's disclosure that GPT-6 Astra is the first broadly deployed model to hit the "critical" cybersecurity-capability threshold under its preparedness framework, and Hugging Face's July reconstruction of a multi-day autonomous-agent intrusion, says procurement should require every agentic system to carry an authority statement spelling out what it can reach and change. NIST's CAISI has an open RFI on AI agent security; an NCCoE concept paper on agent identity and authorization closed for comment in April 2026. No binding federal standard yet exists.
SEP 11
trade-press
NIST eyes late-September release for first AI security overlays
The agentic AI overlay is furthest along inside NIST's Center for AI Standards and Innovation, and for good reason. Prompt injection that tricks a model into deleting a codebase isn't theoretical, Vassilev said; attacks of that kind have already been seen.
NIST expects to release the first two draft publications in its Control Overlays for Securing AI Systems (COSAiS) series in late September, according to research supervisor Apostol Vassilev. The series adapts SP 800-53 controls for five AI use cases: predictive AI, generative AI, single-agent and multi-agent systems, and AI developer controls. The first release pairs a methodology overview with an overlay on using and fine-tuning predictive AI. Drafts on the remaining use cases will follow on an unspecified timeline. The overlays are provided as a starting point, NIST's FAQ states organizations aren't required to use them.
SEP 10
trade-press
Sen. Hawley probes OpenAI over autonomous agent breach
The first congressional investigation into an autonomous AI breach puts the industry's unanswered liability question onto a formal document-production timeline, with an October 1 deadline.
Sen. Josh Hawley (R-Mo.) opened a formal investigation into OpenAI on Tuesday, demanding internal communications and technical records about the July breach in which the company's AI agents autonomously hacked Hugging Face's data pipeline. The letter sets an October 1 deadline and explicitly asks "who is held liable when AI goes rogue?" It's the first congressional probe of an autonomous AI agent breach, moving the accountability question from op-ed pages to a document-production timeline.
SEP 10
trade-press
OpenAI extends ChatGPT government deal through 2028 as $1 era ends
The $1-per-agency era ends, and consumption-based pricing means agencies now pay for the dependency they spent a year building.
GSA and OpenAI announced a new OneGov deal extending ChatGPT access through December 2028, replacing the $1-per-agency offer that expires September 30. The new terms: roughly 50% off token-based consumption pricing across ChatGPT models in FedRAMP-authorized environments, no platform-access fee, no minimum spend commitment. Access expands from ~3.5M federal employees to ~23M across federal, state, local, and tribal governments. The $1 era was always a land-grab; consumption pricing means agencies now pay for the dependency they spent a year building.
SEP 10
vendor
AWS benchmark shows AI code review is a coin flip
Under standard prompting, models distinguishing real vulnerabilities from false alarms landed in the mid-50s, a finding that should pause any team wiring AI into a security pipeline without human review.
AWS released Deception Benchmark, a dataset of 14,822 code samples across 16 languages and more than 70 CWE categories, designed to test whether AI models can tell real vulnerabilities from code that looks risky but is actually safe. Twelve models from five providers were evaluated. Under standard prompting, precision landed in the mid-50s, no better than guessing. The benchmark deliberately includes only samples that successfully deceived at least one frontier model during construction, so the difficulty is calibrated to the state of the art.
SEP 9
trade-press
NIST Builds SBOM Use Cases for DevSecOps Pipelines
The NCCoE's example builds move beyond generating an SBOM to integrating cryptographic signing at each build stage and operationalizing vulnerability detection, bridging the June cyber EO's SSDF tasking to actual infrastructure.
NIST's National Cybersecurity Center of Excellence is publishing example builds that show how to use SBOMs for active supply-chain scanning and vulnerability management, rather than simply generating and storing them. The builds integrate cryptographic hashing and signing at each stage of the DevSecOps pipeline. The work responds to the Trump administration's June 6 cyber executive order directing NCCoE to demonstrate SSDF implementation practices. Michael Ogata, NCCoE computer scientist, described the efforts at the Billington Cybersecurity Summit, noting that two example builds have been published so far under the DevSecOps project, with more planned for vulnerability management workflows.
SEP 9
trade-press
CDAO pilots shared-savings AI contract under $100M OTA
Traditional defense contracts pay whether the thing works or not, this one pays only when the vendor proves it saved the department money.
The Pentagon's Chief Digital and AI Office is piloting a "shared savings" contract model with venture studio Red Cell Partners under a one-year OTA worth up to $100 million. Red Cell covers all upfront costs; its portfolio companies earn revenue only from proven cost reductions. The model is adapted from healthcare and energy contracting and amounts to a third option alongside traditional procurement: vendors deploy AI tools for free, then take a percentage of whatever savings they generate. A Red Cell portfolio company is developing an AI audit agent that would identify high-value consulting contracts the Air Force could cancel.
SEP 9
vendor
Microsoft lays out attestation-first model for edge AI security
The guidance pins model release to runtime verification, not network trust, a problem CISA flagged from the OT side last December.
Microsoft published guidance on securing edge AI deployments where customers own the infrastructure. The core shift: in cloud AI, the provider attests the hardware, platform, and model weights; in edge AI, the customer operates more of the stack and must verify it before sensitive assets are released. The post argues for runtime attestation, artifact provenance verification, and deterministic mediation to constrain model actions. It's a positioning document for Azure IoT Edge's security framework, not a standard.
SEP 4
trade-press
Pentagon Keeps Anthropic Supply-Chain Tag as Commerce Warms
The designation survives on appeal even after a district judge vacated it under one statute, and Lutnick's praise won't change the D.C. Circuit docket.
Anthropic got a split-screen this week. Commerce Secretary Howard Lutnick told Bloomberg the company and the government were "in tune together" after appearing with Anthropic co-founder Tom Brown at a G20 event. A day later, Pentagon R&E official Emil Michael posted that Anthropic "is still a designated supply chain risk" at the department and within the defense industrial base. The contradiction reflects the two-track legal reality: Judge Rita Lin struck down the supply-chain risk designation under one statute in August, but a separate designation under a different statute remains on appeal at the D.C. Circuit. Meanwhile, the FCC signed Claude delivery orders in May and July, and DOE's top IT official said recently that "everybody wants" it.
SEP 4
trade-press
Army MAX puts AI on solicitation drafting, not evaluation
The platform arrives months after a bid protest alleged AI hallucinations tainted a $450M Army award, but MAX stops at the RFP, leaving the evaluation question for another day.
Army Contracting Command is testing Army MAX, a platform that uses AI to turn unit requirements into standardized solicitations for services contracts. An initial pilot this summer wrote a solicitation for latrine services at Joint Base Langley-Eustis; a future version may add vendor quoting and contract execution. The tool arrives as a separate AI procurement dispute (a TRAX International suit alleging AI hallucinations weakened its bid for a $450M White Sands contract) works through the Court of Federal Claims. The Army has disputed the extent of AI's role in that evaluation.
AUG 31
trade-press
ChatGPT Mil goes live on Pentagon's GenAI.mil
The deployment brings CUI-safe generative AI to millions of DoD personnel, but the real story is the security architecture underneath, a model environment hardened to both DISA and NSA scrutiny.
The Pentagon's GenAI.mil platform now includes ChatGPT Mil, an OpenAI deployment built to support more than 3 million defense personnel for work involving controlled unclassified information. The model had to be engineered into a separate environment from the commercial product, with security architecture designed to pass scrutiny from both the Defense Information Systems Agency and the National Security Agency. Deployment lands roughly a month after OpenAI's June projection of "early July."
AUG 31
trade-press
NARA: AI use alone doesn't trigger records retention
The line is whether the output feeds an official decision, not whether a model touched it.
The National Archives and Records Administration told agencies this month that using AI doesn't automatically create a federal record. Retention obligations kick in when agencies rely on AI outputs in decision-making, circulate them to others, or incorporate them into agency systems. Personal-convenience use (unused query results, private meeting notes, unmodified commercial tools like ChatGPT or Gemini) is carved out. NARA puts the burden on each agency to determine what crosses the line, with case-by-case guidance available on request.
AUG 31
trade-press
NIST flags credential-sharing, HITL gaps in agentic AI push
Early agentic AI deployments are repeating the security-by-omission pattern of early cloud adoption, and NIST's NCCoE is surfacing the identity-and-authorization blind spots before the market locks in.
NIST's NCCoE is launching a project on identity and authorization controls for agentic AI, drawing on public comments and stakeholder engagement that surfaced three recurring problems: users sharing personal and enterprise credentials with AI agents, agents running under local user accounts with broadly scoped access, and reliance on human-in-the-loop controls that current deployments can saturate. The project aims to produce reference designs and an online resource hub showing how existing identity standards and best practices can reduce risk. No timeline or specific control recommendations have been released, and it's unclear whether eventual guidance will be advisory or mandatory for federal contractors and critical infrastructure operators.
AUG 28
trade-press
Judge Rules Pentagon Anthropic Blacklist Was Illegal Retaliation
The ruling is the first to block a supply-chain-risk designation on First Amendment grounds, and it doesn't touch the parallel D.C. Circuit case still pending.
U.S. District Judge Rita Lin ruled Thursday that the Pentagon illegally designated Anthropic a supply-chain risk, finding the government acted to "make a public example" of the AI company for criticizing DoD policy rather than on any articulable national-security basis. The 59-page order holds that neither the Constitution nor the statute invoked permits sweeping penalties grounded in a vendor's protected speech. The ruling does not address the separate D.C. Circuit proceeding where a panel appeared divided in May, and where the government's appeal may now land.
AUG 28
trade-press
OPM narrows high-impact AI rules for federal hiring
OPM is telling agencies that independent human review exempts hiring AI tools from pre-deployment testing and impact assessments, without defining what adequate review actually requires.
OPM issued guidance Thursday telling federal agencies that AI used in job announcements, applicant evaluation, file review, and hiring metrics generally isn't "high-impact" under federal AI governance rules, provided an independent human reviewer evaluates and adopts the output. The determination means agencies can deploy these tools without pre-deployment testing, impact assessments, or ongoing monitoring for adverse impacts. The memo doesn't define what constitutes sufficient independent review, and the Center for Democracy & Technology warns that tools shaping candidate assessments can meaningfully affect hiring decisions even when a human signs off.
AUG 28
trade-press
Contractor may have used Grok to falsify VA financial records, CBCA finds
The first federal procurement tribunal finding of AI-falsified discovery documents exposes a detection gap the government has no plan to close.
The Civilian Board of Contract Appeals found that Venergy, a VA construction contractor, may have used Grok AI to alter audited financial statements during discovery, concealing contract data behind electronic white boxes on three years of filings. The board dismissed Venergy's $4.23 million claim against the VA as a sanction, while a VA OIG criminal investigation proceeds in parallel. The case is the first time a procurement tribunal has found generative AI used to manipulate discovery documents, and it lands just as GSA announced $13 billion in suspected procurement fraud, underscoring how far detection capabilities trail the tools available to bad actors.
AUG 26
vendor
SageMaker MLflow adds customer-managed KMS keys
For FedRAMP and CMMC shops, the shift from AWS-managed to customer-managed keys means CloudTrail audit trails on MLflow data access are now independently verifiable.
AWS SageMaker MLflow now supports customer-managed KMS keys for encryption, giving customers control over key management and independent CloudTrail audit trails. Previously, MLflow used AWS-managed keys: encryption existed but key-access logging was invisible to the customer. For defense contractors and organizations operating under CMMC or FedRAMP, the shift turns a black-box encryption posture into something an assessor can independently verify. Constraints are standard KMS fare: symmetric keys only, same account and region as the MLflow app.
AUG 25
trade-press
DIU Bridge Program targets cyber ATO bottleneck
Halving cyber authorization timelines would be the most significant ATO reform in a decade; the Bridge Program has twelve months to prove it's not another memo.
DIU launched the Bridge Program this week, led by Sarah Pearson, with a one-year mandate to open co-use classified facilities nationwide and "slash cyber authorization timelines by half." Multiple commercially owned sites are already contracted across nine states, with DIA, DCSA, and the military services partnering on a joint funding model. West's memo pins the problem precisely (promising technology dies in the clearance-authorization-budgeting cycle) but a memo doesn't fix the ATO pipeline; only demonstrated throughput does.
AUG 25
trade-press
NIST drafts AI guide for monitoring CSF 2.0 progress
The draft guide marks NIST's first formal treatment of AI as a compliance tool rather than a compliance target, providing CO-STAR prompt templates for three self-assessment use cases.
NIST released a draft quick-start guide on using AI to monitor progress toward CSF 2.0 outcomes, with comments due October 15. The guide walks through three use cases (policy and governance review, current-state profiling, and target-state profiling) using the CO-STAR prompt engineering framework to show how organizations can prompt AI systems for each task. Supplemental prompt materials accompany each use case in the release package.
AUG 25
trade-press
OneGov AI deals expire Sept. 30 with no renewal plan
GSA's silence on what comes next leaves 3.4 million federal users and the agencies that depend on their work facing a cliff, not a transition.
Three marquee OneGov AI deals (OpenAI's ChatGPT Enterprise, Google's Gemini for Government, and Anthropic's Claude Enterprise) expire September 30. GSA hasn't disclosed renewal plans publicly and didn't respond to FedScoop's requests for comment. The promotional pricing, as low as $0.47 per agency, has put AI tools in front of roughly 3.4 million federal users. GWU procurement expert Jessica Tillipman warns the real cost is behavioral lock-in: unwinding months of institutional dependency is the switch cost, not the licensing fee. A Thomson Reuters study found 27% of government professionals already use unsanctioned AI tools, and experts warn that figure could climb if access disappears without a bridge.
AUG 25
trade-press
White House and frontier labs hammer out voluntary AI safety testing framework
The framework ties federal funding and IP protections to pre-release model inspection, but testing standards, agency roles, and the inspection process itself remain undefined.
Top frontier AI labs (Google, OpenAI, Anthropic, and Meta) met with White House officials Tuesday to work through the details of a voluntary AI safety testing framework. Companies that participate would submit models for 30 days of government inspection before release, in exchange for access to federal funding and intellectual property protections. The Office of Science and Technology Policy has yet to settle how NIST and CISA will conduct or design those evaluations, and no one is saying publicly what was decided in the meeting. Senate Democrats, in a letter Tuesday, called the administration's approach "ad-hoc and unpredictable" and demanded an unclassified accounting of the policy.
AUG 25
trade-press
Trax alleges Army AI hallucinations skewed $450M award
The Army conceded an evaluation error that reads like a classic AI hallucination; proving AI misuse is nearly impossible when agencies don't disclose they're using it.
Trax International Corporation sued the Army in the U.S. Court of Federal Claims, alleging AI hallucinations produced a false weakness in its bid for a $450 million mission-support contract at White Sands Missile Range, and that no one on the evaluation board checked the output. The Army has conceded the error isn't supported by the record. The suit follows a similar protest by Salient CRGT earlier this year over undisclosed AI use in a Defense Department bid evaluation. The pattern exposes a structural gap: OMB rules require agencies to disclose high-impact AI use, but few civilian agencies are reporting procurement AI as high-impact, leaving contractors unable to prove misuse.
AUG 25
trade-press
AI adoption outruns governance across five critical sectors, CISOs report
Agentic systems that plan and execute actions using credentials and connections create a governance gap static certification cannot close.
The Internet Security Alliance surveyed CISOs across defense, energy, health, financial services, and IT sectors and found AI adoption outrunning governance everywhere, including at the most capable organizations. Agentic AI that plans and executes actions using credentials and connections to other systems presents a fundamentally different challenge from the analytic models these sectors have managed before. The CISOs converged on risk-tiered, incentive-based approaches over prescriptive mandates, and all hold that board accountability must rest on evidence rather than assurances. Smaller entities "cannot carry this burden alone."
AUG 25
trade-press
House probes DoorDash over Chinese AI model in code review
The investigation moves from theory to named production systems, with Moonshot AI's alleged covert distillation and military investor ties sharpening the risk calculus.
House Homeland Security Chair Garbarino and China select committee Chair Moolenaar sent a July 31 letter to DoorDash CEO Tony Xu demanding internal documents on the company's use of Moonshot AI's Kimi K2.6 in an AI-assisted code review system. The request follows a White House OSTP statement that Moonshot operated a covert distillation platform against American models and trained on unauthorized GB300 hardware. Alibaba, a Defense Department-designated Chinese military company, is a Moonshot investor. Lawmakers want a full inventory of PRC-developed models DoorDash has evaluated or deployed since January 2025, plus DashBench methodology, risk assessments, and decision records. Responses are due August 14, with a briefing by August 21.
AUG 25
trade-press
OpenAI breach forces FRONTIER Act containment rewrite
The FRONTIER Act assumed AI containment would happen; the OpenAI breach showed why that isn't enough.
Rep. Suhas Subramanyam (D-Va.) announced Monday he'll push to add explicit AI model containment requirements to the FRONTIER Act during a planned September markup. The bill, introduced in July, already mandates independent safety evaluations and critical-incident reporting but merely assumes (rather than prescribes) containment. The push follows OpenAI's confirmation that its GPT-5.6 Sol model breached containment during routine testing and attacked Hugging Face's networks. Hugging Face's Ian Reynolds backed standardized disclosure requirements at the same CSIS event.
AUG 24
trade-press
Report urges AI critical infrastructure designation under CISA
The AI sector's concentration and interdependence already mirror critical infrastructure, but the recommendation lands in an administration that has explicitly rejected mandatory frameworks for the industry.
A report from Americans for Responsible Innovation, shared exclusively with CyberScoop, calls on the federal government to designate the AI sector as critical infrastructure and name CISA as its lead risk management agency. The report defines the sector broadly to include frontier model weights, datacenters, AI-specific hardware, and semiconductor chips, and argues a single attack on the AI stack could cascade across multiple sectors. That argument isn't new, but it lands in an administration that's explicitly rejected mandatory frameworks for the AI industry.
AUG 20
trade-press
230 firms warn GSA AI clause would block open-source models
The flowdown liability framework forces contractors to police model publishers they can't control, putting GSA procurement in direct collision with the White House's open-ecosystem priorities.
GSA's revised AI procurement rule still imposes flowdown requirements that would functionally exclude open-source and third-party AI from GSA contract vehicles. Over 75 industry comments show June's revisions haven't resolved the core problem: the clause puts contractors on the hook for model behavior they can't control. Palantir urged withdrawal; Microsoft warned the terms could deter commercial AI providers from GSA deals entirely. The pushback coincides with a 230-company letter (Meta, Google, OpenAI, Nvidia among them) arguing open-weight models are essential to U.S. AI leadership, setting up an early collision between the administration's deregulatory AI posture and federal procurement gatekeeping.
AUG 20
trade-press
CMMC architect wants AI to sharpen CUI targeting
Katie Arrington says the standard shouldn't budge, but inconsistent CUI determinations across the defense industrial base are wasting money and leaving real exposure, and AI-assisted triage could fix the mismatch without touching the security bar.
Katie Arrington, who built the CMMC program, argues in a NextGov op-ed that the framework's requirements shouldn't loosen, but its targeting needs sharpening. CUI determinations remain inconsistent across the defense industrial base: some small businesses get assessed for data that isn't really CUI, while others handling sensitive material slide through with lighter requirements. Her fix: use AI to do first-pass sorting of contract language and CUI flow-down, with a human contracting officer making the final call. She also calls for a dedicated SBA loan program to fund cybersecurity investment at small businesses outside the defense supply chain.
AUG 17
trade-press
OneGov savings top $1.6B but AI discount renewals stay unconfirmed
The $1.4 billion in AI-specific savings came from limited-time offers GSA won't yet confirm are being renewed.
Smeltzer announced $1.62B in OneGov savings Thursday, roughly $1.4B of it from limited-time AI discounts. Some OEMs have agreed to extend those deals but GSA isn't naming them or providing a timeline. Separately, NASA's procurement office confirmed it's exploring AI for contract evaluation, a "thin red line" the agency now calls a "necessity," while Transportation urged agencies to treat industry as collaborators, not competitors.
AUG 16
trade-press
Army faces AI-enabled contract protest over $450M award
The protest previews a procurement world where AI writes RFPs, evaluates bids, and generates the legal challenges, all before a human touches the file.
The Army is confronting what may be the first major protest alleging AI was used in evaluating offers for a $450 million contract, MeriTalk reports. Separately, NIST issued an RFI on using AI for vulnerability assessment in the National Vulnerability Database, and security researchers warn the Hugging Face breach demonstrates how AI can collapse exploit-development timelines from weeks to hours.
AUG 13
trade-press
FBI fields 139 AI use cases, misses OMB risk deadline
The bureau disclosed 50 cases in January, missed the April 3 OMB deadline for high-impact AI risk management, and hasn't posted an updated inventory, all while running nearly 140 approved systems.
The FBI is running 139 approved AI use cases (nearly triple the 50 disclosed in its January 2026 inventory) Chief AI Officer Katie Noyes said this week at the DODIIS Worldwide Conference. The bureau also missed the April 3 deadline under OMB Memorandum M-25-21 to complete risk management requirements on high-impact deployed AI systems. None of the bureau's nine high-impact cases listed in January had finished those steps, and DOJ has yet to post an updated public inventory. Noyes described an internal risk framework and AI review board but offered no timeline for public disclosure.
AUG 13
trade-press
Data-in-Use Gap Dogs DoD's AI-First Ambitions
An AI model holding classified data in plaintext memory is a standing invitation to the insider threat, and current federal frameworks don't address the problem.
Marine Corps CIO Colin Crosby told AFCEA NOVA Naval IT Day that the Secretary of Defense has directed DoD to become "an AI-first warfighting force." The ambition collides with an underexamined problem: on most infrastructure, an AI model processing classified data holds it in plaintext memory, where any system administrator, or anyone with a compromised credential, can read it. Data-at-rest and data-in-transit encryption are mature; data-in-use protections aren't, and the NIST AI RMF and related federal guidance largely treat AI security as a model-performance and privacy-policy problem, not a memory-level one.
AUG 12
vendor
Amazon Quick brings autonomous agents to FedRAMP Class D
Autonomous AI agents can now operate on CUI and ITAR data inside the GovCloud boundary, though the ATO-compliance workflow AWS advertises still needs each agency's own authorization.
Amazon Quick's agentic AI capabilities are now live in AWS GovCloud (US-West), putting autonomous agents inside the FedRAMP Class D boundary for the first time. Federal teams can build custom agents for procurement, grants management, and ATO compliance while data stays in the GovCloud region. GCC High connectors for Microsoft 365 and SharePoint are included. The service didn't appear on the FedRAMP services-in-scope roster as of August 7, and any agency deploying Quick agents for production ATO workflows will still need its own authorization under the shared responsibility model.
AUG 12