Date Published: December 16, 2025
Comments Due:
Email Comments to:
Author(s)
Katerina Megas (NIST), Barbara Cuthill (NIST), Marissa Dotter (MITRE), Michael Garris (MITRE), Ishika Khemani (MITRE), Bronwyn Patrick (MITRE), Noah Schiro (MITRE), Julie Nethery Snyder (MITRE), Mohammad Zarei (MITRE)
Announcement
Check out NIST’s Cyber AI Profile Preliminary Draft and Save the Date for our Cyber AI Workshop #2 in January
Draft for Public Comment
AI has become a driving force behind today’s technological development, transforming industries and redefining how society operates. Advancements in AI technology introduce both cybersecurity opportunities and challenges to organizations.
NIST’s preliminary draft Cyber AI Profile can help organizations strategically adopt AI while addressing and prioritizing cybersecurity risks stemming from its advancements.
The Cyber AI Profile addresses the following Focus Areas:
- Securing AI System Components (Secure)
- Conducting AI-Enabled Cyber Defense (Defend)
- Thwarting AI-enabled Cyber Attacks (Thwart)
The profile is open for comments until January 30, 2026. Your feedback is crucial in shaping the next and final version of this publication.
NOTE: A call for patent claims is included in this draft. For additional information, see the Information Technology Laboratory (ITL) Patent Policy – Inclusion of Patents in ITL Publications.
January 2026 Event: Cyber AI Workshop #2
Save the date for a workshop on January 14, 2026 to discuss the Preliminary Draft of the Cyber AI Profile and hear updates regarding the SP 800-53 Control Overlays for Securing AI Systems (COSAiS). Details and registration information will be posted later this month.
Questions?
Email the team: [email protected]. To stay up to date on this Profile and follow its progress, we recommend joining the NCCoE Cyber AI Community of Interest (COI).
The Cybersecurity Framework Profile for Artificial Intelligence (AI) Profile (“Cyber AI Profile” or “The Profile”) will provide guidelines for managing cybersecurity risk related to AI systems as well as identifying opportunities for using AI to enhance cybersecurity capabilities. The Profile is organized using the NIST Cybersecurity Framework 2.0 outcomes (Functions, Categories, and Subcategories). This Preliminary Draft is shared along with a request for public comment to solicit feedback on the planned direction and content. Comments received will inform the initial public draft. More information about this project, including a roadmap, is available on the National Cybersecurity Center of Excellence (NCCoE) Cyber AI Profile project page.
The Cybersecurity Framework Profile for Artificial Intelligence (AI) Profile (“Cyber AI Profile” or “The Profile”) will provide guidelines for managing cybersecurity risk related to AI systems as well as identifying opportunities for using AI to enhance cybersecurity capabilities. The Profile is...
See full abstract
The Cybersecurity Framework Profile for Artificial Intelligence (AI) Profile (“Cyber AI Profile” or “The Profile”) will provide guidelines for managing cybersecurity risk related to AI systems as well as identifying opportunities for using AI to enhance cybersecurity capabilities. The Profile is organized using the NIST Cybersecurity Framework 2.0 outcomes (Functions, Categories, and Subcategories). This Preliminary Draft is shared along with a request for public comment to solicit feedback on the planned direction and content. Comments received will inform the initial public draft. More information about this project, including a roadmap, is available on the National Cybersecurity Center of Excellence (NCCoE) Cyber AI Profile project page.
Hide full abstract
Keywords
artificial Intelligence; Community Profile; Cyber AI Profile; Cybersecurity Framework; risk management
Control Families
None selected