The U.S. Needs a Better AI Plan

To supercharge its technological capabilities, the US government is setting sail on a transformative AI journey.
A recent Government Accountability Office report reveals a critical lack of policies and standards, leaving the nation's security vulnerable.
The 96-page exposé delves into the government's AI landscape.
As AI's power grows, so do concerns about its impact, from job displacement to national security threats.
The GAO surveyed 23 agencies, exposing the strides and secrecy in AI adoption.
Notably, agencies like NASA and the Department of Homeland Security are leveraging AI for tasks ranging from monitoring volcanoes to border surveillance.
The report sheds light on a clandestine world, where more than 350 sensitive AI applications remain undisclosed.
The Departments of Justice and Homeland Security, with a small number of use cases, raise eyebrows due to the sensitivity of their AI applications, including thousands of facial recognition searches without adequate oversight.
The GAO emphasizes the urgent need for government-wide guidance, pointing out the Office of Management and Budget's delay in providing essential AI acquisition and use frameworks.
Agencies risk inconsistent approaches without standardized policies, jeopardizing public welfare and security.
While President Biden's recent AI executive order adds a layer of oversight, the GAO report grades agencies on their adherence to AI-related requirements.
OMB, lagging on AI guidance, faces scrutiny alongside other agencies lacking in crucial planning.
For more details, you can access the full GAO report here: https://www.
This is a Security Bloggers Network syndicated blog from Centraleyes authored by Joy Deep Majumdar.


This Cyber News was published on securityboulevard.com. Publication date: Thu, 14 Dec 2023 14:13:05 +0000


Cyber News related to The U.S. Needs a Better AI Plan

Incident Response Plan: How to Build, Examples, Template - A strong incident response plan - guidance that dictates what to do in the event of a security incident - is vital to ensure organizations can recover from an attack or other cybersecurity event and minimize potential disruption to company ...
9 months ago Techtarget.com
Cybersecurity Crisis Management: Best Practices for Business Continuity - In the current security environment, cyber threats present an ever-increasing challenge for business organizations. To remain competitive, enterprises must implement strategies and protocols to manage cybersecurity crises and ensure business ...
1 year ago Tripwire.com
A Plan to Protect Critical Infrastructure from 21st Century Threats - On April 30th, the White House released National Security Memorandum-22 on Critical Infrastructure Security and Resilience, which updates national policy on how the U.S. government protects and secures critical infrastructure from cyber and ...
5 months ago Cisa.gov
The US Needs To Follow Germany's Attack-Detection Mandate - To effectively combat these threats, the US needs to adopt a comprehensive and proactive approach to cybersecurity, similar to the one taken by Germany with its IT-SiG 2.0 mandate. The IT-SiG Approach Compared With the US's Current Capabilities One ...
11 months ago Darkreading.com
Crafting an Effective Cyber Attack Response Plan: A Comprehensive Guide - In an era dominated by digital advancements, businesses and organizations face an ever-growing threat from cyber attacks. The importance of having a robust cyber attack response plan cannot be overstated. A well-crafted plan not only helps mitigate ...
10 months ago Cybersecurity-insiders.com
Free & Downloadable Cybersecurity Incident Response Plan Templates - An effective cybersecurity incident response plan can be the difference between a minor disruption and a major crisis. This article provides you with comprehensive IRP templates in PDF, Word, and Google Docs formats to ensure your organization can ...
9 months ago Heimdalsecurity.com
eSecurity Planet - Dashlane is a password management software that's popular for business and personal uses alike. Like many other password managers, Dashlane makes it easy for users to create new passwords and store existing ones in a secure vault. Internet security ...
9 months ago Esecurityplanet.com
9 Best DDoS Protection Service Providers for 2024 - eSecurity Planet content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More. One of the most powerful defenses an organization can employ against distributed ...
11 months ago Esecurityplanet.com
How to Conduct Incident Response Tabletop Exercises - An incident response tabletop exercise is an activity that involves testing the processes outlined in an incident response plan. Attack simulations are run to ensure incident response team members know their roles and responsibilities - and whether ...
9 months ago Techtarget.com
Data Breach Response: A Step-by-Step Guide - In today's interconnected world, organizations must be prepared to respond swiftly and effectively in the face of a data breach. To navigate these challenges, a well-defined and comprehensive data breach response plan is essential. Let's explore the ...
8 months ago Securityzap.com
AVG Secure VPN vs Surfshark: Which VPN Is Better? - If you've been checking out competitor AVG Secure VPN and are wondering how it stacks up against Surfshark, I've got you covered in this review. I signed up for both VPNs and compared AVG and Surfshark head-to-head to help you decide which one is the ...
4 months ago Techrepublic.com
With the Right Support, Developers Can Lead Your Organization to Superior PCI-DSS 4.0 Compliance - The Payment Card Industry Data Security Standard version 4.0 will change almost everything about security for any business or organization that accepts electronic payments, which is a vast majority of them. Make no mistake, this update will be ...
10 months ago Feeds.dzone.com
Marketing Strategies for PaaS Services: Get Ahead of the Curve - With the ever-growing demand for cloud-based performance and services, Platform-as-a-Service (PaaS) is becoming increasingly critical for modern software development. PaaS is a cloud-based platform, providing businesses with an integrated suite of ...
1 year ago Hackread.com
Business Data Backup and Recovery Planning - Data backup and recovery planning is essential in today's interconnected and data-driven business landscape. By understanding the significance of data backup and recovery planning, businesses can effectively protect their critical information and ...
8 months ago Securityzap.com
What to Do if You Expose a Secret: How to Stay Calm and Respond to an Incident - You probably are here because you leaked a secret somewhere and want to get straight to rotating the secret. If you are a solo developer or you know for sure you are the only user of the secret and understand what rotating the secret might disrupt, ...
11 months ago Feeds.dzone.com
China's MIIT Proposes Color-coded Contingency Plan for Security Incidents - On Friday, China proposed a four-tier classification system, in an effort to address data security incidents, underscoring concerns of Beijing in regards to the widespread data leaks and hacking incidents in the country. This emergency plan comes ...
10 months ago Cysecurity.news
LastPass Free vs. Premium: Which Plan Is Right for You? - LastPass is a password manager that integrates with web browsers and other applications to securely save and autofill passwords. LastPass Free comes at no cost and provides features like unlimited password management and dark web monitoring. LastPass ...
8 months ago Techrepublic.com
4 key steps to building an incident response plan - In this Help Net Security interview, Mike Toole, head of security and IT at Blumira, discusses the components of an effective security incident response strategy and how they work together to ensure organizations can address cybersecurity issues. An ...
4 months ago Helpnetsecurity.com
Australian Organisations Face Tensions Between Personalisation, Privacy - Organisations in Australia face a significant challenge with data. Consumers are willing to share their data if it means better personalisation. On the other hand, there is a real concern about privacy, and while organisations are focused on looking ...
9 months ago Techrepublic.com
The 3 Most Prevalent Cyber Threats of the Holidays - As many of us deck the halls, some folks are preparing for the cybersecurity holiday season - that perilous time of year rife with breaches, attacks, and threats in far greater frequency than in any other time of year. The surge in cyber business is ...
10 months ago Darkreading.com
Africa, Middle East Lead Peers in Cybersecurity, but Lag Globally - Both Africa and the Middle East lead their economic peers in cybersecurity, but the regions fall short of claiming strong scores for overall cyber resilience. According to data published by SecurityScorecard on Jan. 15 at the World Economic Forum ...
9 months ago Darkreading.com
How to perform a proof of concept for automated discovery using Amazon Macie | AWS Security Blog - After reviewing the managed data identifiers provided by Macie and creating the custom data identifiers needed for your POC, it’s time to stage data sets that will help demonstrate the capabilities of these identifiers and better understand how ...
1 month ago Aws.amazon.com
Twelve Steps to Cyber Resiliency - Improving cybersecurity resiliency is crucial for modern organizations protecting themselves against today's evolving cyber threats. Remember, cybersecurity is a moving target, and resiliency and adaptability must be at the core of your strategy. ...
10 months ago Feeds.fortinet.com
Continuity in Chaos: Applying Time-Tested Incident Response to Modern Cybersecurity - Incident response is foundational to every security program, yet many companies still struggle with adoption and testing. He enumerated the top challenges of incident response at the time which were 1) Increasing complexity and sophistication of ...
9 months ago Securityweek.com
Surfshark vs IPVanish: Which VPN Should You Choose? - Surfshark and IPVanish are premium virtual private network services that mask your IP address and internet activity so you can browse privately. In this review, I compare Surfshark and IPVanish based on pricing, speed, features, customer support and ...
4 months ago Techrepublic.com

Latest Cyber News


Cyber Trends (last 7 days)


Trending Cyber News (last 7 days)