By July 2 contractors and vendors of AI solutions will see new opportunities emerge that will address AI-related security concerns and expand the use of AI vulnerability detection solutions across the federal government.
On June 2, the administration signed off on Executive Order 14409 (EO 14409), “Promoting Advanced AI Innovation and Security Analysis.” The order has specific and wide-ranging responsibilities for agencies that include Cybersecurity and Infrastructure Security Agency (CISA), the Office of Management and Budget (OMB) and the National Security Agency (NSA), as well as the Department of War and other agencies.
Collaboration with the private sector is explicit in the order. It underscores U.S. policy to “promote AI innovation and security by working collaboratively with the private sector to modernize government and private sector information systems and harden them against external threats; to protect American ingenuity and intellectual property from exploitation and theft by adversaries; and to cultivate America’s advanced AI-enabled capabilities.”
AI contractors will find several opportunities because of this executive order, including:
- Engaging CISA, NSA and the U.S. Treasury Department (TREAS) to provide AI vulnerability detection solutions by leveraging new grant funding, the new AI cybersecurity clearinghouse and the expansion of federal programs related to these tools
- Joining the new “covered frontier models” voluntary framework to get solutions in front of government customers and help shape future requirements
- Providing cybersecurity solutions to the Department of Justice (DOJ) to augment their newly prioritized enforcement actions against AI-related cybercrimes
EO 14409 is divided into three overarching sections, most of which require some level of action that begins
on July 2:
- Upgrading American systems for advanced AI
- Secure frontier model deployment
- Protection against criminal actors
Let’s break down each of these provisions and the underlying opportunities for vendors selling AI to the federal government.
Upgrading American systems for advanced AI
The federal government is calling for the upgrade and expansion of cybersecurity capabilities tailored to AI vulnerability detection, and to deploy those capabilities across not only the federal government, but across SLED as well. Vendors have a clear opportunity to offer these capabilities to CISA, NSA and TREAS.
Most of the initiatives in this section require these organizations to begin work starting July 2.
Cybersecurity tool expansion. By July 2, CISA, OMB, the Assistant to the President for National Security Affairs and the National Cyber Director are required to prioritize the cyber defense of federal information systems. The goal is to expand federal programs for cybersecurity services that enhance AI-enabled defensive tools. The named organizations will also facilitate access to those tools, including covered frontier models, to federal agencies, state and local authorities, and critical infrastructure operators.
AI cybersecurity clearinghouse. By July 2, TREAS, NSA, CISA and the National Cyber Director are to form a voluntary AI cybersecurity clearinghouse with AI developers. The purpose of this clearinghouse will be to coordinate and “deconflict” scanning for software vulnerabilities and discover and validate likely vulnerabilities. The order requires the organizations to coordinate and prioritize remediation of the vulnerabilities and to distribute any necessary vulnerability patches.
Grant funding for AI vulnerability detection. OMB, CISA and National Cyber Director are to work together to examine federal grant programs for relevant funding to be directed toward applicants developing advanced AI vulnerability detection. This priority has a deadline to begin by July 2.
Secure frontier model deployment
Voluntary pre-release model access. EO 14409 calls for a voluntary benchmarking process with AI developers to be undertaken by August 1. This benchmarking process would “assess the advanced cyber capabilities of AI models and determine the threshold at which an AI model should be designated a ‘covered frontier model.’” Government “trusted partners” are to gain early access to covered frontier models in as little as 30 days before those models are released.
The goal is to promote secure innovation and strengthen the cybersecurity of critical infrastructure. Access to the models would be subject to appropriate confidentiality, cybersecurity, insider-risk, and intellectual-property protection, use, and nondisclosure requirements.
Prime contractors should coordinate with their AI suppliers to join this framework. This is an opportunity to get AI capabilities in front of government customers and help shape the requirements of future “covered frontier models.”
Protection against criminal actors
AI cybercrimes enforcement. Under EO 14409, the U.S. Attorney General is required to prioritize the enforcement of federal criminal laws against anyone who uses AI to illegally access a federal computer without authorization, or to damage that computer or to use AI for illegal access in the furtherance of any other crime.
This illegal access includes the breaching of any public or private information technology system or employing AI agents to unlawfully access data or information that is subsequently used for a criminal or unlawful purpose.
This portion of the executive order presents a clear opportunity for contractors to demonstrate to the DOJ how their capabilities can help detect AI-related vulnerabilities and improve enforcement of AI-related cybercrimes.
The use of AI in the federal government is being fast-tracked for innovation or security – or a combination of both. With so much required of federal agencies in the next month, the AI vendor community should immediately start framing their solutions in ways that can show government buyers how they can meet the requirements of the new executive order.
Understanding EO 14409 and the opportunities it presents is not a simple task. immixGroup can help you bring clarity to the EO and discover business opportunities to both AI vendors and solutions providers. Contact us here.
Visit www.immixgroup.com for more information.