Artificial Intelligence security guidance

Section 6504 of the Intelligence Authorization Act for Fiscal Year 2025 (division F of Public Law 118–159) is amended— (1) in subsection (c)— (A) by redesignating paragraph (3) as paragraph (4); and (B) by inserting after paragraph (2) the following new paragraph (3): (3) In accordance with subsection (d), developing security guidance to defend artificial intelligence technologies from technology theft by nation-state adversaries.; (2) by redesignating subsection (d) as subsection (e); and (3) by inserting after subsection (c) the following: (d) Artificial Intelligence security guidance (1) Elements In developing the guidance pursuant to subsection (c)(3), the Director of the National Security Agency shall— (A) identify vulnerabilities in advanced artificial intelligence technologies, with a focus on cybersecurity risks and security challenges unique to protecting such technologies from theft or sabotage by nation-state adversaries; (B) identify elements of the artificial intelligence supply chain or development or product lifecycle that, if accessed by nation-state adversaries, would contribute to progress made by nation-state adversaries on advanced artificial intelligence or would provide opportunities to adversaries to compromise the confidentiality, integrity, or availability of artificial intelligence systems or associated supply chains; and (C) identify strategies for artificial intelligence technologies to identify, protect, detect, respond, and recover from nation-state adversary cyber threats. (2) External collaboration In developing the guidance pursuant to subsection (c)(3), the Director of the National Security Agency may collaborate, on a voluntary basis, with other departments and agencies of the United States Government, research entities, and private sector entities, as determined appropriate by the Director, on artificial intelligence model safety and security, including through the provision of any computing resources the Director determines appropriate. (3) Security guidance form The Director of the National Security Agency shall publish, and may update from time to time, the security guidance developed under subsection (c)(3) to share with departments and agencies of the United States Government, research entities, and private sector entities, as determined appropriate by the Director, at unclassified or classified levels..