DoD considers AI use for zero-trust reviews

The U.S. Defense Department's Zero Trust Portfolio Management Office has issued a request for information as it considers the use of AI and automation to help the Pentagon speed up and expand zero-trust cybersecurity assessments ahead of upcoming compliance deadlines, according to DefenseScoop.

Pentagon has been looking for ways to apply machine learning and AI to purple teaming, which tests how attackers and cyber defenders operate within networks. It said that automation could help overcome staffing and time limits tied to validating compliance and conducting continuous monitoring. Zero trust assumes networks are always under threat and requires constant verification of users and devices. All DoD components are required to reach "target levels" of zero trust by the end of fiscal 2027.

Officials have previously said purple teaming can be resource-intensive and divert personnel from other missions. The office is asking vendors to submit ideas for commercial, AI-enabled tools that could support assessments on both unclassified and secret systems. The RFI states evaluations will examine the "91 Target level Zero Trust activities and the ten Zero Trust Acceptance Criteria." Submissions are due by Feb. 9.