Politics

Key actions include identifying labs priority information needs designating single federal liaison for industry enhancing intelligence collection on threats to AI labs streamlining classified intelligence sharing

Options include extending national security clearance processes to select positions conducting tailored background checks without issuing clearances screening applicants against federal security databases to flag potential risks

Decisionmakers may pursue different options depending on priorities

Government-enforced AI security standards uses model registration and self-assessment

AI Developer Authorization for Federal Use authorizes developers for federal use to ensure compliance with secure-by-design principles

AI Developer Authorization for Federal Use uses tier assignment by ris

Industry-Led AI Security Certification uses industry-informed security controls based on best practices developed by community and likely prescriptive with flexible implementation options

Government-enforced AI security standards uses audits and in-person inspections

AI Developer Authorization for Federal Use uses incident reporting and quarterly risk reports

AI Developer Authorization for Federal Use uses whistleblower reporting and protections

Industry-Led AI Security Certification uses regular vulnerability scans

Industry-Led AI Security Certification uses periodic security audit by third-party assessor

Developers must conduct self-assessments

Developers must undergo third-party audits reviewed by FASSO’s compliance committee

Certification status is public

Government-enforced AI security standards involves new congressional legislation and a new AI Safety and Security Institute within the US Department of Commerce

AI Developer Authorization for Federal Use involves Office of Management and Budget (OMB) policy guidance embedded in federal acquisition regulation and Federal Risk and Authorization Management Program (FedRAMP)-AI extension within the US General Services Administration

Industry-Led AI Security Certification involves consensus-based multistakeholder governance with committees for standards disputes and compliance and industry consortium if developed

Government-enforced AI security standards uses independent government penetration testing

FASSO establishes a certification program to enforce shared security standards across participating frontier AI developers