CISA Roadmap for Artificial Intelligence (AI in cybersecurity defense and risk)
United States · CISA AI Roadmap (Nov. 14, 2023)
CISA's AI Roadmap outlines how the U.S. cybersecurity agency will use AI to defend networks, secure AI systems against attacks, and protect critical infrastructure from AI-enabled threats — including deepfakes and AI-driven cyberattacks on the 16 critical-infrastructure sectors.
Technical detail
Cybersecurity and Infrastructure Security Agency, 'Roadmap for Artificial Intelligence' (Nov. 14, 2023). Five lines of effort: responsibly use AI to defend, assure AI system security, protect critical infrastructure from malicious AI use, collaborate with international AI partners, and expand CISA AI expertise. Implements EO 14110 § 4.3(b) and continues under CISA's existing authority.
Who is protected: U.S. critical-infrastructure operators and downstream consumers
Who must comply: Voluntary cooperation with critical-infrastructure sectors
Key facts
| Jurisdiction | United States |
|---|---|
| Level | Federal |
| Status | In effect |
| Protection strength | Limited protection |
| Effective date | 2023-11-14 |
| Enacted | 2023-11-14 |
| Citation | CISA AI Roadmap (Nov. 14, 2023) |
| Enforced by | Cybersecurity and Infrastructure Security Agency |
| Private right of action | No — agency enforcement only |
| Penalties | None; advisory and coordination role |
| Topics | government use of AI · consumer protection · automated decision-making |
| Last verified | 2026-06-17 |
| Official source | CISA Roadmap for Artificial Intelligence (Nov. 2023) ↗ |
More AI rules in United States
- Trump AI Innovation & Security EO (June 2026) · In effect
- FERC order directing PJM and other grid operators to reform · Enacted (not yet in effect)
- Chatrie v. United States (Fourth Amendment protection for lo · Blocked / in litigation
- Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757) · Proposed / pending
- NAIC AI Evaluation Tool Pilot (12 states, 2026) · Proposed / pending
- FTC Proposed Policy Statement — AI Accuracy (July 2026) · Proposed / pending
Related government use of AI rules elsewhere
- CA EO N-6-26 (AI Workforce) · In effect
- WA SB 5982 (Data Center / Clean Energy) · In effect
- Arkansas public entity AI/ADS policy mandate (Act 848, 2025) · In effect
- One-year moratorium on data center development (Inver Grove Heights MN) · In effect
- San Marcos citywide data center ban (Land Use Matrix amendme · In effect
- Washington County (MD) 12-month data center moratorium · Enacted (not yet in effect)
See something wrong or out of date? Submit a correction — every entry must carry a verifiable official source.