AI and National Security

Artificial Intelligence (AI) can greatly improve human efficiency and deliver insights that drive decision-making. However, for all of its benefits, AI also introduces security risks both for the organizations that are using it and for the nation at large. The National Security Memorandum (NSM) on Artificial Intelligence, released in the fall of 2024, details national security strategy and policy toward AI. While this particular guidance is aimed at agencies directly involved in national security, its three high-level policy objectives should be part of every agency's AI strategy.

  1. Maintain U.S. leadership in the development of advanced AI systems

A key focus is on not just using AI but driving responsible AI development. To do so, the U.S. needs an AI-capable workforce. This means having the experts that develop the technology as well as training the operational and tactical workforce in how to best use it. Continue reading

A Look at Homeland Security Innovation Strategy

The mission of the Department of Homeland Security (DHS) is to "secure the nation from the many threats we face." An underlooked key to this statement is the word "many." Agencies under the Department are responsible for managing our borders, protecting the nation from cyber and physical threats, and supporting recovery from natural disasters and cyber attacks. To meet this mission, DHS has been embracing innovative approaches and emerging technology to supplement the efforts of the workforce charged with meeting these varied threats.

The DHS Innovation, Research & Development Strategic Plan laid out eight scientific areas as focal points for research to support national security:

  • Advanced sensing
  • AI and autonomous systems
  • Biotechnology
  • Climate change
  • Communications and networking
  • Cybersecurity
  • Data integration, analytics, modeling, and simulation
  • Digital identity and trust

As part of its work in each of these areas, DHS will be researching how emerging technology can support mission efforts as well as the risks technology poses to national security. In this blog, we'll take a look at the activity in a couple of these areas. Continue reading

Meet the Chief AI Officer

The executive order (EO) on artificial intelligence, issued in October of 2023, calls on agencies to designate a chief artificial intelligence officer (CAIO) responsible for coordinating AI use, promoting AI innovation, and handling AI-related risk management within their agency. Efforts are underway to codify this mandate, with bills introduced in the House and Senate that would turn the EO recommendation into law.

In the year since the mandate and in advance of legislated requirements, agencies have worked to not only fill but define this new CAIO role. In some instances, CAIO duties have been added to the job description for an existing executive--typically the chief data officer or chief technology officer--but in others, a stand-alone position has been created to meet the agency's AI needs. Continue reading

Securing the Machines that Drive our Democracy

The devices used in voting are relatively low-tech. In order to avoid cyber threats, even those that use a touch screen to capture votes are intentionally not connected to the internet. However, even this unconnected approach has security risks that need to be addressed so that these devices and the data they hold aren't tampered with. The states and localities that administer elections are continually focused on the full spectrum of security risks, putting processes and systems in place in advance of election day to ensure that voting is safe and secure.

Diversity is a Strength

The diversity of voting machines being used across the country reduces threat impacts. If there is an issue with a piece of software, it won't impact the entire national voting system, just particular machines. While software vulnerabilities are still huge problems, standardizing on one type of machine nationwide would mean one software bug could wipe out all electoral results. Continue reading

FITARA 18 Sees Agencies Move to the Head of the Class

FITARA

The latest Federal Information Technology Acquisition Reform Act (FITARA) scorecard, released in September, showed dramatic improvements in the progress agencies have made towards meeting IT modernization goals. The overall grades of 18 of the 24 tracked agencies increased, while grades for the remaining six agencies were unchanged. Per the scorecard,13 agencies now have an overall 'A,' 10 have a 'B,' and only one agency--the Energy Department--has a grade of 'C.' The Department of Health and Human Services and the Department of State showed the greatest improvements, with both agencies' grades moving from 'D's to 'A's.

The grading categories, unchanged from the previous report, measured agency CIO authority enhancements; CIO investment evaluation; cloud computing; modernizing government technology; cybersecurity; and progress transitioning from legacy contracts to the GSA's newer Enterprise Information Solutions (EIS) contract. Improvements in the categories of cloud computing, cybersecurity, and EIS transition contributed to higher scores. Continue reading