As U.S. federal agencies move to take advantage of the potential benefits of artificial intelligence (AI) they are also left wondering how to structure governance of these new systems. President Biden’s Executive Order on AI and the following memorandum from the White House Office of Management and Budget stated that all agencies must appoint a Chief AI Officer.

But where does this individual sit within an organization? What background should they have? To whom do they report? Governance must consider the typical cybersecurity tenants of confidentiality, integrity, and availability but expand to consider explainability, safety, and potential for bias.

How this will be done and answers to these questions will be examined in an upcoming paper from the Center for Cybersecurity Policy & Law (CCPL). We want to hear from those in government and industry on how these challenges are being solved and how agencies are moving forward.

Specifically, the paper will:

  • Explore current and proposed governance structure within agencies, based on White House and NIST guidance, and what changes may be necessary to incorporate AI.
  • Understand other approaches to governance of AI and identify best practices both in the public and private sector organizations that can be identified and replicated.
  • Review existing guidance on AI deployment and applicable guidance from other overlapping disciplines -- cyber, data, risk management, acquisition -- for federal agencies and identify gaps.
  • Recommend actionable guidance that can accelerate agencies implementation or development of safe and secure AI.

Existing policy components from cloud computing, cybersecurity, automated technologies, and other implementations of innovative technologies could be relevant and useful if applied. Policy specifically for AI could be accelerated if existing applicable policy is clarified and new policy is focused on specific enhancements required for government use of AI.

Have a perspective on AI governance? Reach out to the CCPL team to share your thoughts on how this challenge can be solved as we race toward rolling out AI systems across government.

Heather West & Zack Martin

Read Next

Putting the Work into Workshop with NIST’s Privacy Engineering Program

NIST hosted the Ready, Set, Update! Privacy Framework 1.1 + Data Governance and Management Profile Workshop, a two-day event to solicit feedback on updates to the Privacy Framework and the creation of a Data Governance and Management Profile.

Spotlight on the NIST Privacy Framework: It Takes a Village…

NIST's Privacy Workforce Public Working Group (PWWG) is a community of professionals from diverse backgrounds united under a shared goal to nurture and develop a skilled privacy workforce.

Growing a Diverse Workforce in Cybersecurity

With the National Cyber Strategy Workforce Development Implementation strategy release just around the corner, the conversation around increasing diversity within the cybersecurity industry has never been more prevalent.