NIST Publishes Preliminary Draft of Cybersecurity Framework Profile for Artificial Intelligence for Public Comment

NIST published a preliminary draft of the Cybersecurity Framework Profile for Artificial Intelligence for public comment on 16 December 2025. The draft profile overlays three AI Focus Areas—Secure, Detect, Thwart—onto the CSF 2.0 outcomes (Functions, Categories, and Subcategories) to guide organisations in managing AI-related cybersecurity risk.

It is intended to provide guidelines for managing cybersecurity risk related to AI systems and to identify opportunities for using AI to enhance cybersecurity capabilities, according to the draft. The guidance is designed to be flexible so a range of organisations, from mature to novel programmes, can use it alongside existing frameworks they already have in place.

The authors noted the draft will be familiar to those already leveraging CSF 2.0 and may be complementary to other frameworks, as organisations consider securing AI implementations or defending against adversarial uses of AI. Read more at Inside Privacy.