Trending claims

Government-enforced AI security standards involves new congressional legislation and a new AI Safety and Security Institute within the US Department of Commerce

Government-enforced AI security standards uses independent government penetration testing

Congress grants AISSI authority to set and enforce security requirements

Compliance is enforced through third-party assessors continuous monitoring and corrective action plans

Labs demonstrate adherence through incident reporting audits inspections red teaming and whistleblower protections

SAFE-AI sets security requirements with tiered obligations based on model risk

Compliance is ensured through audits penetration testing and incident reporting

Government-enforced AI security standards uses hybrid prescriptive outcome-based risk-informed standards informed by National Institute of Standards and Technology (NIST) standards if developed and includes nation-state–level protection goals

The analysis identified two principles that guide compliance regime design and implementation proportionality which calibrates requirements to entities’ level of risk and operational capacity and stakeholder engagement with transparency

Government-enforced AI security standards uses model registration and self-assessment

RAND researchers identified four foundational elements critical to achieving compliance and promoting security across these approaches

This work enables decisionmakers to better weigh trade-offs and find the right balance between strengthening security and preserving innovation by presenting a variety of practicable options

Federal agencies and industry consortia established compliance regimes to promote industrywide adoption of security standards among these industries

These governance models sought to shift firms’ cost-benefit calculations and drive greater investment in protective measures by combining incentives and penalties

Competitive pressures and inconsistent approaches raise questions about the adequacy of self-regulation although some companies have made voluntary commitments to protect their systems

Leadership and institutional capacities are organizational elements that provide authority resources and expertise needed to design and implement the framework

Researchers examined security governance approaches in seven high-risk sectors such as nuclear chemical and health care to draw lessons for the AI industry

Approaches to each element varied across regimes for several reasons including differences in the nature of the assets being protected and the number and diversity of covered entities

Enforcement mechanisms are tools to drive compliance including penalties for noncompliance and revocation of benefits

Compliance lagged and security gaps persisted where elements were underdeveloped or poorly implemented