CISA AI Roadmap
CISA Roadmap for Artificial Intelligence (AI in cybersecurity defense and risk)
United States · CISA AI Roadmap (Nov. 14, 2023)
- Status
- In effect
- Took effect
- November 14, 2023
- Applies to
- Voluntary cooperation with critical-infrastructure sectors
- Enforced by
- Cybersecurity and Infrastructure Security Agency
CISA's AI Roadmap outlines how the U.S. cybersecurity agency will use AI to defend networks, secure AI systems against attacks, and protect critical infrastructure from AI-enabled threats — including deepfakes and AI-driven cyberattacks on the 16 critical-infrastructure sectors.
Who is protected: U.S. critical-infrastructure operators and downstream consumers
Legal detail
Cybersecurity and Infrastructure Security Agency, 'Roadmap for Artificial Intelligence' (Nov. 14, 2023). Five lines of effort: responsibly use AI to defend, assure AI system security, protect critical infrastructure from malicious AI use, collaborate with international AI partners, and expand CISA AI expertise. Implements EO 14110 § 4.3(b) and continues under CISA's existing authority.
Key facts
| Jurisdiction | United States |
|---|---|
| Level | Federal |
| Strength | Limited |
| Enacted | November 14, 2023 |
| Citation | CISA AI Roadmap (Nov. 14, 2023) |
| Private right of action | No, agency enforcement only |
| Penalties | None; advisory and coordination role |
| Topics | government use of AI · consumer protection · automated decision-making |
| Agency page | CISA Roadmap for Artificial Intelligence (Nov. 2023) |
More AI rules in United States
- Trump AI Innovation & Security EO (June 2026) · In effect
- FERC order directing PJM and other grid operators to reform tariffs on… · Enacted (not yet in effect)
- Chatrie v. United States (Fourth Amendment protection for location… · Blocked / in litigation
- Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757) · Proposed / pending
- NAIC AI Evaluation Tool Pilot (12 states, 2026) · Proposed / pending
- FTC Proposed Policy Statement — AI Accuracy (July 2026) · Proposed / pending
Related government use of AI rules elsewhere
- CA EO N-6-26 (AI Workforce) · In effect
- WA SB 5982 (Data Center / Clean Energy) · In effect
- Arkansas public entity AI/ADS policy mandate (Act 848, 2025) · In effect
- Inver Grove Heights MN data center moratorium amended under lawsuit (2026) · In effect
- San Marcos citywide data center ban (Land Use Matrix amendment) · In effect
- Washington County (MD) 12-month data center moratorium · In effect
See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.