NIST releases draft cybersecurity framework for AI adoption

According to a report by Silicon Angle, the U.S. National Institute of Standards and Technology (NIST) has released a preliminary draft of its Cybersecurity Framework Profile for Artificial Intelligence. This new profile aims to provide guidance for organizations looking to securely adopt AI technologies.

The draft adapts the existing NIST Cybersecurity Framework 2.0, which organizes risk management around core functions like Govern, Identify, Protect, Detect, Respond, and Recover. Known as the "Cyber AI Profile," it applies this model to AI use cases, offering a blueprint for confident AI adoption while addressing evolving threats. The profile focuses on three key areas: securing AI system components, conducting AI-enabled cyber defense, and thwarting AI-enabled cyberattacks. It covers risks inherent to AI infrastructure, models, and data pipelines, as well as how AI can enhance defensive capabilities and strategies against adversaries leveraging AI. NIST developed the draft through a year-long collaborative process involving over 6,500 contributors.

The draft, open for public comment until January 30, 2026, has received mixed initial reactions. Some experts note that it may not fully address complex AI orchestration scenarios where AI agents control other AI tools. Despite this, the framework is intended to help organizations manage cybersecurity risks associated with AI advancements, complementing existing frameworks rather than replacing them. The broader impact lies in establishing a common language and structured approach for managing AI-related cyber risks across industries.

Source: Silicon Angle