NIST discusses proposed ways to extend its Cyber AI Profile for agentic AI and Zero Trust; the material is preliminary and nonbinding.

policy paper United States 3/10

Government · NIST Computer Security Resource Center

This NIST NCCoE discussion essay supports factual context about proposed extensions to the Cyber AI Profile, including agentic-AI risks, Zero Trust, community feedback, and three integration options. NIST expresses a preference for targeted Cybersecurity Framework Subcategory revisions, but the material is preliminary and does not establish binding requirements, legal duties, implementation deadlines, certification criteria, or measured effectiveness.

Action required

Monitor NIST’s working-session process and later publications for the Cyber AI Profile. Do not treat this preliminary discussion essay as establishing legal duties, final requirements, deadlines, certification criteria, or measured effectiveness.

Binding status

advisory

Governing body

National Institute of Standards and Technology National Cybersecurity Center of Excellence

Direction

clarifying

Innovation impact

enabling

AI technologies

ai agents

Affected industries

technologygovernmenttelecommunicationsfinancial serviceshealthcareenergydefense

Affected roles

cisoctochief ai officerrisk managercompliance officerdata scientist

Frameworks

nist ai rmf

Cross-references

Cites standards

NIST Cyber AI Profile, NIST Cybersecurity Framework

Enriched 2026-05-13 · resolved via nist publication

Stay informed

Get daily intelligence briefs on this and related regulatory developments.

Start 14-day trial

Important — about this brief

This brief is published by AIGI as a regulatory intelligence service. It contains general information about AI laws, regulations, enforcement actions, and policy signals across jurisdictions. It is not legal, compliance, audit, or risk-management advice; it does not establish an attorney-client, advisory, or fiduciary relationship; and it should not be relied upon as a substitute for professional counsel applied to specific facts and circumstances. Where the brief identifies “Issues for Review,” those are observations of questions a reader in a particular role might raise with their own legal, compliance, or risk function — not recommendations to act. AIGI expressly disclaims liability for actions taken or not taken in reliance on this brief. Subscribers in regulated industries should consult licensed professionals authorized to practice in their jurisdiction.

Terms and disclosures →