Skip to main content
Add as a preferred source on Google


Proposed NIST Cybersecurity Guidelines Aim to Safeguard AI Systems

  • By John K. Waters
  • 08/19/25

The National Institute of Standards and Technology (NIST) has announced plans to issue a new set of cybersecurity guidelines aimed at safeguarding artificial intelligence systems, citing rising concerns over risks tied to generative models, predictive analytics, and autonomous agents.

The concept paper outlines a framework called Control Overlays for Securing AI Systems (COSAIS), which adapts existing federal cybersecurity standards (SP 800-53) to address unique vulnerabilities in AI. NIST said the overlays will provide practical, implementation-focused security measures for organizations deploying AI technologies, from large language models to predictive decision-making systems.

"AI systems introduce risks that are distinct from traditional software, particularly around model integrity, training data security, and potential misuse," according to the concept paper. "By leveraging familiar SP 800-53 controls, COSAIS offers a technical foundation that organizations can adapt to AI-specific threats."

The initial overlays will cover five categories of use: generative AI applications such as chatbots and image generators; predictive AI systems used in business and finance; single-agent and multi-agent AI systems designed for automation; and secure software development practices for AI developers. Each overlay will address risks to model training, deployment, and outputs, with a focus on protecting data confidentiality, integrity, and availability.

The effort builds on NIST's existing AI Risk Management Framework and related guidelines on adversarial machine learning and dual-use foundation models. COSAIS will also complement the agency's work on a Cybersecurity Framework Profile for AI, ensuring consistency across risk management approaches.

NIST is inviting feedback from AI developers, cybersecurity professionals, and industry groups on the draft, including whether the proposed use cases capture real-world adoption patterns and how the overlays should be prioritized. The agency plans to release a public draft of the first overlay in fiscal year 2026, alongside a stakeholder workshop.

Interested parties can share feedback via e-mail or through a Slack channel dedicated to the project.

For more information, go to the NIST site.

About the Author

John K. Waters is the editor in chief of a number of Converge360.com sites, with a focus on high-end development, AI and future tech. He's been writing about cutting-edge technologies and culture of Silicon Valley for more than two decades, and he's written more than a dozen books. He also co-scripted the documentary film Silicon Valley: A 100 Year Renaissance, which aired on PBS.  He can be reached at [email protected].

Featured

  • circuit patterns

    Anthropic Intros Lower-Cost Claude Sonnet 5

    Anthropic has launched Claude Sonnet 5, positioning the model as its most autonomous mid-tier offering to date and a lower-cost alternative to its flagship Opus 4.8 system. The company said the model can plan multi-step tasks, operate tools such as browsers and terminals, and complete agentic work at a level that previously required larger and more expensive models.

  • children sitting on white chairs, holding up colorful speech bubbles

    Why Title III Is Lacking in Today's Multilingual, Technology-Enhanced Classrooms

    When Congress strengthened Title III in the early 2000s, the focus was helping students acquire English and access academic content. That goal remains important, but the classrooms of 2026 look very different from those of 2001.

  • Human Hand Assembling Digital Data Blocks

    Report: AI Impact Relies on Strong Data Foundation

    High-impact AI implementations are more likely to treat data architecture, governance, and operationalization as strategic requirements, according to the 2026 Blueprint report from TDWI.

  • business woman and stress with burnout, busy and multitasking

    K–12 Technology Leaders Are Doing Too Much: 3 Ways to Reclaim Strategic Focus

    Technology directors touch nearly everything that happens in a school system. Here are three strategies these IT leaders can use to navigate their many duties without losing strategic focus, influence, or sustainability.