,,ii  #aah? ,,congress  #a/ ,session    
,s4 #cbje  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,novemb] #b1 #bjbc,mr4 
,moran 7= himself & ,mr4 ,w>n]7         
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,homel& ,security & ,gov]nm5tal ,affairs
  ,a ,,bill  ,to require ,f$]al ag5cies 
to use ! ,artificial ,intellig5ce ,risk 
,managem5t ,framework develop$ by !     
,national ,in/itute ( ,/&>ds &          
,te*nology ) respect to ! use (         
artificial intellig5ce4  #a4 ,%ort title
 ,?is ,act may be cit$ z ! ,f$]al       
,artificial ,intellig5ce ,risk          
,managem5t ,act ( #bjbc4  #b4 ,ag5cy use
 ( artificial intellig5ce  7a7          
,def9itions ,9 ?is section3 7#a7        
,adm9i/rator ,! t]m ,adm9i/rator means !
 ,adm9i/rator ( ,f$]al ,procurem5t      
,policy4  7#b7 ,ag5cy ,! t]m ag5cy means
 any dep>tm5t1 indep5d5t e/abli%m5t1    
,gov]nm5t corporation1 or o!r ag5cy ( ! 
executive bran* ( ! ,f$]al ,gov]nm5t4   
7#c7 ,artificial intellig5ce ,! t]m     

artificial intellig5ce has ! mean+ giv5 
! t]m 9 section #ejjb ( ! ,national     
,artificial ,intellig5ce ,initiative    
,act ( #bjbj 7#ae ,u4,s4,c4 #idja74     
7#d7 ,director ,! t]m ,director means ! 
,director ( ! ,national ,in/itute (     
,/&>ds & ,te*nology4  7#e7 ,framework ,!
 t]m framework means docum5t numb] ,,ni/
 ,,ai #ajj-a ( ! ,national ,in/itute (  
,/&>ds & ,te*nology entitl$ ,artificial 
,intellig5ce ,risk ,managem5t           
,framework1 or any successor docum5t4   
7#f7 ,playbook ,! t]m playbook means !  
,,ai ,,rmf ,playbook develop$ by !      
,national ,in/itute ( ,/&>ds &          
,te*nology4  7#g7 ,pr(ile ,! t]m pr(ile 
means an implem5tation ( ! artificial   
intellig5ce risk managem5t functions1   
categories1 & subcategories = a specific
 sett+ or application bas$ on !         
requirem5ts1 risk tol]ance1 & res\rces (
 ! framework us]4  7b7 ,requirem5ts =   
ag5cy use ( artificial intellig5ce  7#a7
 ,,omb ,guidance ,n lat] ?an #ahj days  
aft] ! date on :i* ! ,director ( !      

,national ,in/itute ( ,/&>ds &          
,te*nology issues guidel9es "u p>agraph 
7#b71 ! ,director ( ! ,(fice (          
,managem5t & ,budget %all issue guidance
 requir+ ag5cies to incorporate !       
framework & ! guidel9es into _!         
artificial intellig5ce risk managem5t   
ef=ts1 consi/5t ) su* guidel9es4  7#b7  
,,ni/ ,guidel9es ,n lat] ?an #a ye> aft]
 ! date ( ! enactm5t ( ?is ,act1 !      
,director ( ! ,national ,in/itute (     
,/&>ds & ,te*nology %all1 9 consultation
 ) ! ,adm9i/rator1 issue guidance =     
ag5cies to incorporate ! framework into 
! artificial intellig5ce risk managem5t 
ef=ts ( ! ag5cy1 :i* %all-- 7,a7 provide
 /&>ds1 practices1 & tools consi/5t ) ! 
framework & h[ !y c lev]age ! framework 
to r$uce risks to p & ! planet = ag5cy  
implem5tation 9 ! developm5t1           
procurem5t1 & use ( artificial          
intellig5ce2  7,b7 specify appropriate  
cyb]security /rategies & ! in/allation (
 effective cyb]security tools to improve
 security ( artificial intellig5ce      

sy/ems2  7,c7 provide /&>ds-- 7i7 t are 
consi/5t ) ! framework & ,circul>       
,a-#aai ( ! ,(fice ( ,managem5t &       
,budget2  7ii7 t are tailor$ to risks t 
c\ld endang] p & ! planet2 &  7iii7 :i* 
a suppli] ( artificial intellig5ce = !  
ag5cy mu/ atte/ to meet be=e ! head ( an
 ag5cy may procure artificial           
intellig5ce f t suppli]2  7,d7 recomm5d 
tra9+ on ! framework & ! guidel9es = ea*
 ag5cy responsible = procur+ artificial 
intellig5ce2  7,e7 set m9imum           
requirem5ts = develop+ pr(iles = ag5cy  
use ( artificial intellig5ce consi/5t ) 
! framework2 &  7,f7 develop pr(iles =  
framework use = an entity t is a small  
bus9ess conc]n 7z def9$ 9 section #c ( !
 ,small ,bus9ess ,act 7#ae ,u4,s4,c4    
#fcb774  7#c7 ,additional requirem5ts   
7,a7 ,draft contract language ,!        
,adm9i/rator %all1 9 consultation ) !   
,director1 provide draft contract       
language = ea* ag5cy to use 9 procurem5t
 t requires a suppli] ( artificial      
intellig5ce-- 7i7 to adh]e to c]ta9     

actions t are consi/5t ) ! framework2 & 
7ii7 to provide appropriate access to   
data1 models1 & p>amet]s1 z def9$ by !  
,director1 to enable suffici5t te/ &    
evaluation1 v]ification1 & validation4  
7,b7 ,templates ,! ,director ( ! ,(fice 
( ,managem5t & ,budget %all1 9          
consultation ) ! ,director1 provide a   
template = ag5cy use on ! guidance issu$
 "u p>agraph 7#a7 t includes recomm5d$  
proc$ures = implem5tation4  7#d7 ,con=m+
 requirem5t ,! head ( ea* ag5cy %all    
con=m any policy1 pr9ciple1 practice1   
proc$ure1 or guidel9e gov]n+ ! design1  
developm5t1 implem5tation1 deploym5t1   
use1 or evaluation ( an artificial      
intellig5ce sy/em by ! ag5cy to !       
framework & to ! guidance issu$ "u      
p>agraph 7#a74  7#e7 ,support+ mat]ial  
,9 c>ry+ out p>agraph 7#d71 ! head ( ea*
 ag5cy may use ! support+ mat]ials ( !  
framework1 includ+ ! playbook4  7#f7    
,/udy ,n lat] ?an #a ye> aft] ! date (  
enactm5t ( ?is ,act1 ! ,comptroll]      
,g5]al ( ! ,unit$ ,/ates %all conduct a 

/udy on ! impact ( ! application ( !    
framework on ag5cy use ( artificial     
intellig5ce4  7#g7 ,report+ requirem5t  
,n lat] ?an #a ye> aft] ! date ( !      
enactm5t ( ?is ,act1 & n less frequ5tly 
?an once e #c ye>s !reaft]1 ! ,director 
( ! ,(fice ( ,managem5t & ,budget %all  
submit to ,congress a report on ag5cy   
implem5tation ( & con=mity to !         
framework4  7#h7 ,exception = national  
security sy/ems ,no?+ 9 ?is subsection  
%all apply to a national security sy/em 
7z def9$ 9 section #ceeb ( title #dd1   
,unit$ ,/ates ,code74  7c7 ,requirem5ts 
= ag5cy procurem5t ( artificial         
intellig5ce ,n lat] ?an #a ye> aft] !   
issuance ( guidance pursuant to         
subsection 7b77#a71 ! ,f$]al            
,acquisition ,regulatory ,c\ncil %all   
promulgate regulations t provide =--    
7#a7 ! requirem5ts = ! acquisition (    
artificial intellig5ce products1        
s]vices1 tools1 & sy/ems1 to include    
risk-bas$ compliance ) ! framework2 &   
7#b7 solicitation provisions & contract 

clauses t include ref]5ces to !         
requirem5ts describ$ 9 p>agraph 7#a7 & !
 framework = use 9 artificial           
intellig5ce acquisitions4  7d7          
,artificial intellig5ce work=ce  7#a7 ,9
 g5]al ,n lat] ?an #ahj days aft] ! date
 ( ! enactm5t ( ?is ,act1 ! ,director ( 
! ,(fice ( ,managem5t & ,budget %all1 9 
consultation ) ! ,adm9i/rator ( ! ,g5]al
 ,s]vices ,adm9i/ration1 e/abli% an     
initiative to provide to ag5cies        
exp]tise on artificial intellig5ce      
pursuant to reque/s = su* exp]tise by ! 
heads ( su* ag5cies4  7#b7 ,elem5ts ,!  
initiative e/abli%$ pursuant to p>agraph
 7#a7 %all include ! foll[+3 7,a7 ,!    
recruitm5t & hir+ ( int]discipl9>y      
exp]ts :o c assi/ ag5cies 9 !           
developm5t1 procurem5t1 use1 & assessm5t
 ( artificial intellig5ce tools4  7,b7  
,a process = e/abli%+ developm5t &      
deploym5t guidel9es & tools = manag+    
artificial intellig5ce risks "u :i* !   
initiative c assi/ ag5cies4  7,c7       
,consultation ) exi/+ initiatives1      

includ+ ,unit$ ,/ates ,digital ,s]vice &
 ! te*nology trans=mation s]vices ( !   
,g5]al ,s]vices ,adm9i/ration1 to       
incorporate be/ practices = assi/+      
ag5cies 9 ! developm5t1 procurem5t1 use1
 & assessm5t ( artificial intellig5ce   
tools4  7e7 ,te/+ & evaluation (        
artificial intellig5ce  7#a7 ,/udy ,n   
lat] ?an #ij days aft] ! date ( !       
enactm5t ( ?is ,act1 ! ,director ( !    
,national ,in/itute ( ,/&>ds &          
,te*nology %all complete a /udy to      
review ! exi/+ & =?com+ volunt>y        
cons5sus /&>ds = ! te/1 evaluation1     
v]ification1 & validation ( artificial  
intellig5ce acquisitions4  7#b7         
,developm5t ( volunt>y cons5sus /&>ds ,n
 lat] ?an #ij days aft] ! date ( !      
completion ( ! /udy requir$ by p>agraph 
7#a71 ! ,director %all-- 7,a7 conv5e    
relevant /akehold]s to develop volunt>y 
cons5sus /&>ds = ! te/1 evaluation1     
v]ification1 & validation ( artificial  
intellig5ce acquisitions2  7,b7 ^u      
completion ( ! /&>ds describ$ 9         

subp>agraph 7,a7 or )9 #a ye>1 :i*ev] is
 soon]-- 7i7 develop me?ods & pr9ciples1
 bas$ on ! /&>ds describ$ 9 subp>agraph 
7,a71 = ! conduct ( te/1 evaluation1    
v]ification1 & validation ( artificial  
intellig5ce acquisitions2  7ii7 e/abli% 
! res\rces = ! conduct ( te/1           
evaluation1 v]ification1 & validation ( 
artificial intellig5ce acquisitions2    
7iii7 monitor & review all te/1         
evaluation1 v]ification1 & validation ( 
artificial intellig5ce acquisitions2 &  
7iv7 review & make recomm5dations to !  
head ( ea* ag5cy ( risks to p & ! plant 
on relevant artificial intellig5ce      
acquisitions2 &  7,c7 cont9u\sly update 
! me?ods & pr9ciples describ$ 9         
subp>agraph 7,b77i7 bas$ on evolv+      
volunt>y cons5sus /&>ds4