,,ii  #aah? ,,congress  #b;d ,session   
,s4 #dbcj  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,may #a1 #bjbd,mr4     
,w>n] 7= himself & ,mr4 ,tillis7        
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,comm]ce1 ,sci5ce1 & ,transportation  ,a
 ,,bill  ,to improve ! track+ & process+
 ( security & safety incid5ts & risks   
associat$ ) artificial intellig5ce1 & = 
o!r purposes4  #a4 ,%ort title ,?is ,act
 may be cit$ z ! ,secure ,artificial    
,intellig5ce ,act ( #bjbd or ! ,secure  
,a4,i4 ,act ( #bjbd4  #b4 ,def9itions ,9
 ?is ,act3 7#a7 ,artificial intellig5ce 
safety incid5t ,! t]m artificial        
intellig5ce safety incid5t means an ev5t
 t increases ! risk t op]ation ( an     
artificial intellig5ce sy/em w-- 7,a7   
result 9 physical or psy*ological h>m2  
or  7,b7 lead to a /ate 9 :i* human     
life1 heal?1 prop]ty1 or ! environm5t is
 endang]$4  7#b7 ,artificial intellig5ce
 security incid5t ,! t]m artificial     
intellig5ce security incid5t means an   

ev5t t increases-- 7,a7 ! risk t        
op]ation ( an artificial intellig5ce    
sy/em occurs 9 a way t enables !        
extraction ( in=mation ab\t ! behavior  
or *>act]i/ics ( an artificial          
intellig5ce sy/em by a ?ird p>ty2 or    
7,b7 ! ability ( a ?ird p>ty to         
manipulate an artificial intellig5ce    
sy/em 9 ord] to subv]t ! confid5tiality1
 integrity1 or availability ( an        
artificial intellig5ce sy/em or adjac5t 
sy/em4  7#c7 ,artificial intellig5ce    
security vuln]ability ,! t]m artificial 
intellig5ce security vuln]ability means 
a weakness 9 an artificial intellig5ce  
sy/em t c\ld be exploit$ by a ?ird p>ty 
to subv]t1 )\t au?orization1 !          
confid5tiality1 integrity1 or           
availability ( an artificial intellig5ce
 sy/em1 includ+ ?r\gh te*niques su* z-- 
7,a7 data poison+2  7,b7 evasion        
attacks2  7,c7 privacy-bas$ attacks2 &  
7,d7 abuse attacks4  7#d7               
,c\nt]-artificial intellig5ce ,! t]m    
c\nt]-artificial intellig5ce means      

te*niques or proc$ures to extract       
in=mation ab\t ! behavior or *>act]i/ics
 ( an artificial intellig5ce sy/em1 or  
to le>n h[ to manipulate an artificial  
intellig5ce sy/em1 9 ord] to subv]t !   
confid5tiality1 integrity1 or           
availability ( an artificial intellig5ce
 sy/em or adjac5t sy/em4  #c4 ,volunt>y 
track+ & process+ ( security & safety   
incid5ts & risks associat$ ) artificial 
intellig5ce  7a7 ,processes & proc$ures 
= vuln]ability managem5t ,n lat] ?an    
#ahj days aft] ! date ( ! enactm5t ( ?is
 ,act1 ! ,director ( ! ,national        
,in/itute ( ,/&>ds & ,te*nology %all--  
7#a7 initiate a process to update       
processes & proc$ures associat$ ) !     
,national ,vuln]ability ,database ( !   
,in/itute to ensure t ! database &      
associat$ vuln]ability managem5t        
processes incorporate artificial        
intellig5ce security vuln]abilities to !
 greate/ ext5t practicable2 &  7#b7     
id5tify any *>act]i/ics ( artificial    
intellig5ce security vuln]abilities t   

make utilization ( ! ,national          
,vuln]ability ,database inappropriate = 
_! managem5t & develop processes &      
proc$ures = vuln]ability managem5t = ^? 
vuln]abilities4  7b7 ,volunt>y track+ ( 
artificial intellig5ce security &       
artificial intellig5ce safety incid5ts  
7#a7 ,volunt>y database requir$ ,n lat] 
?an #a ye> aft] ! date ( ! enactm5t (   
?is ,act1 ! ,director ( ! ,in/itute1 9  
coord9ation ) ! ,director ( !           
,cyb]security & ,infra/ructure ,security
 ,ag5cy1 %all-- 7,a7 develop & e/abli% a
 compreh5sive1 volunt>y database to     
publicly track artificial intellig5ce   
security & artificial intellig5ce safety
 incid5ts2 &  7,b7 9 e/abli%+ ! database
 "u subp>agraph 7,a7-- 7i7 e/abli%      
me*anisms by :i* private sector         
entities1 public sector organizations1  
civil society gr\ps1 & academic rese>*]s
 may volunt>ily %>e in=mation ) !       
,in/itute on confirm$ or suspect$       
artificial intellig5ce security or      
artificial intellig5ce safety incid5ts1 

9 a mann] t pres]ves confid5tiality (   
any affect$ p>ty2  7ii7 lev]age1 to !   
greate/ ext5t possible1 /&>diz$         
disclosure & incid5t description =mats2 
7iii7 develop processes to associate    
reports p]ta9+ to ! same incid5t ) a    
s+le incid5t id5tifi]2  7iv7 e/abli%    
classification1 in=mation retrieval1 &  
report+ me*anisms t suffici5tly         
diff]5tiate betwe5 artificial           
intellig5ce security incid5ts &         
artificial intellig5ce safety incid5ts2 
&  7v7 create appropriate taxonomies to 
classify incid5ts bas$ on relevant      
*>act]i/ics1 impact1 or o!r relevant    
crit]ia4  7#b7 ,id5tification & treatm5t
 ( mat]ial artificial intellig5ce       
security or artificial intellig5ce      
safety risks  7,a7 ,9 g5]al ,^u receipt 
( relevant in=mation on an artificial   
intellig5ce security or artificial      
intellig5ce safety incid5t1 ! ,director 
( ! ,in/itute %all det]m9e :e!r !       
describ$ incid5t pres5ts a mat]ial      
artificial intellig5ce security or      

artificial intellig5ce safety risk      
suffici5t = inclusion 9 ! database      
develop$ & e/abli%$ "u p>agraph 7#a74   
7,b7 ,priorities ,9 evaluat+ a report$  
incid5t pursuant to p>agraph 7#a71 !    
,director %all prioritize inclusion 9 ! 
database cases 9 :i* a describ$         
incid5t-- 7i7 describes an artificial   
intellig5ce sy/em us$ 9 critical        
infra/ructure or safety-critical sy/ems2
  7ii7 w\ld result 9 a high-sev]ity or  
cata/rophic impact to ! p or economy ( !
 ,unit$ ,/ates2 or  7iii7 includes an   
artificial intellig5ce sy/em widely us$ 
9 comm]cial or public sector contexts4  
7#c7 ,reports & anonymity ,! ,director  
%all populate ! volunt>y database       
develop$ & e/abli%$ "u p>agraph 7#a7 )  
incid5ts bas$ on public reports &       
in=mation %>$ us+ ! me*anism e/abli%$   
pursuant to subp>agraph 7,b77i7 ( su*   
p>agraph1 ensur+ t any incid5t          
description suffici5tly anonymizes ^?   
affect$1 unless ^? :o are affect$ h     
cons5t$ to _! names be+ includ$ 9 !     

database4  #d4 ,updat+ processes &      
proc$ures relat+ to ,common             
,vuln]abilities & ,exposures ,program & 
evaluation ( cons5sus /&>ds relat+ to   
artificial intellig5ce security         
vuln]ability report+  7a7 ,def9itions ,9
 ?is section3 7#a7 ,common              
,vuln]abilities & ,exposures ,program ,!
 t]m ,common ,vuln]abilities &          
,exposures ,program means ! ref]5ce     
guide & classification sy/em = publicly 
kn[n in=mation security vuln]abilities  
sponsor$ by ! ,cyb]security &           
,infra/ructure ,security ,ag5cy4  7#b7  
,relevant congressional committees ,!   
t]m relevant congressional committees   
means-- 7,a7 ! ,committee on ,homel&    
,security & ,gov]nm5tal ,affairs1 !     
,committee on ,comm]ce1 ,sci5ce1 &      
,transportation1 ! ,select ,committee on
 ,intellig5ce1 & ! ,committee on !      
,judici>y ( ! ,s5ate2 &  7,b7 !         
,committee on ,ov]sight &               
,acc\ntability1 ! ,committee on ,en]gy &
 ,comm]ce1 ! ,p]man5t ,select ,committee

 on ,intellig5ce1 & ! ,committee on !   
,judici>y ( ! ,h\se ( ,repres5tatives4  
7b7 ,9 g5]al ,n lat] ?an #ahj days aft] 
! date ( enactm5t ( ?is ,act1 !         
,director ( ! ,cyb]security &           
,infra/ructure ,security ,ag5cy %all--  
7#a7 initiate a process to update       
processes & proc$ures associat$ ) !     
,common ,vuln]abilities & ,exposures    
,program to ensure t ! program &        
associat$ processes id5tify & enum]ate  
artificial intellig5ce security         
vuln]abilities to ! greate/ ext5t       
practicable2 &  7#b7 id5tify any        
*>act]i/ic ( artificial intellig5ce     
security vuln]abilities t make          
utilization ( ! ,common ,vuln]abilities 
& ,exposures ,program inappropriate = _!
 managem5t & develop processes &        
proc$ures = vuln]ability id5tification &
 enum]ation = ^? artificial intellig5ce 
security vuln]abilities4  7c7           
,evaluation ( cons5sus /&>ds  7#a7 ,9   
g5]al ,n lat] ?an #cj days aft] ! date (
 enactm5t ( ?is ,act1 ! ,director ( !   

,national ,in/itute ( ,/&>ds &          
,te*nology %all initiate a              
multi-/akehold] process to evaluate :e!r
 exi/+ volunt>y cons5sus /&>ds =        
vuln]ability report+ effectively        
accommodate artificial intellig5ce      
security vuln]abilities4  7#b7 ,report  
7,a7 ,submission ,n lat] ?an #ahj days  
aft] ! date on :i* ! evaluation "u      
p>agraph 7#a7 is c>ri$ out1 ! ,director 
%all submit a report to ! relevant      
congressional committees on ! suffici5cy
 ( exi/+ vuln]ability report+ processes 
& /&>ds to accommodate artificial       
intellig5ce security vuln]abilities4    
7,b7 ,po/-report action ,if ! ,director 
concludes 9 ! report submitt$ "u        
subp>agraph 7,a7 t exi/+ processes d n  
suffici5tly accommodate report+ (       
artificial intellig5ce security         
vuln]abilities1 ! ,director %all        
initiate a process1 9 consultation ) !  
,director ( ! ,national ,in/itute (     
,/&>ds & ,te*nology & ! ,director ( !   
,(fice ( ,managem5t & ,budget1 to update

 relevant vuln]ability report+          
processes1 includ+ ! ,dep>tm5t ( ,homel&
 ,security ,b9d+ ,op]ational ,directive 
#bj-ja1 or any subsequ5t directive4  7d7
 ,be/ practices ,n lat] ?an #ij days    
aft] ! date ( enactm5t ( ?is ,act1 !    
,director ( ! ,cyb]security &           
,infra/ructure ,security ,ag5cy %all1 9 
collaboration ) ! ,director ( !         
,national ,security ,ag5cy & ! ,director
 ( ! ,national ,in/itute ( ,/&>ds &     
,te*nology & by lev]ag+ ef=ts ( !       
,in=mation ,communications ,te*nology   
,supply ,*a9 ,risk ,managem5t ,task ,=ce
 to ! greate/ ext5t practicable1 conv5e 
a multi-/akehold] process to enc\rage ! 
developm5t & adoption ( be/ practices   
relat+ to address+ supply *a9 risks     
associat$ ) tra9+ & ma9ta9+ artificial  
intellig5ce models1 :i* %all ensure     
consid]ation ( supply *a9 risks         
associat$ )-- 7#a7 data collection1     
clean+1 & label+1 p>ticul>ly ! supply   
*a9 risks ( reliance on remote work=ce &
 =eign labor = su* tasks2  7#b7         

inadequate docum5tation ( tra9+ data &  
te/ data /orage1 z well z limit$        
prov5ance ( tra9+ data2  7#c7 human     
fe$back sy/ems us$ to ref9e artificial  
intellig5ce sy/ems1 p>ticul>ly ! supply 
*a9 risks ( reliance on remote work=ce &
 =eign labor = su* tasks2  7#d7 ! use ( 
l>ge-scale1 op5-s\rce datasets1         
p>ticul>ly ! supply *a9 risks to        
repositories t ho/ su* datasets = use by
 public & private sector develop]s 9 !  
,unit$ ,/ates2 &  7#e7 ! use (          
propriet>y datasets conta9+ s5sitive or 
p]sonally id5tifiable in=mation4  7e7   
,rule ( con/ruction ,to ! ext5t         
practicable1 ! ,director %all exam9e !  
report+ requirem5ts pursuant to division
 ,y ( ! ,cyb] ,incid5t ,report+ =       
,critical ,infra/ructure ,act ( #bjbb   
7,public ,law #aag-ajc7 & ! am5dm5ts    
made by t division & ensure t !         
requirem5ts "u ?is section are n        
duplicative ( requirem5ts set =? 9 t    
division & ! am5dm5ts made by t         
division4  #e4 ,e/abli%m5t ( ,artificial

 ,intellig5ce ,security ,c5t]  7a7      
,e/abli%m5t ,n lat] ?an #ij days aft] ! 
date ( ! enactm5t ( ?is ,act1 !         
,director ( ! ,national ,security ,ag5cy
 %all e/abli% an ,artificial            
,intellig5ce ,security ,c5t] )9 !       
,cyb]security ,collaboration ,c5t] ( !  
,national ,security ,ag5cy4  7b7        
,functions ,! functions ( ! ,artificial 
,intellig5ce ,security ,c5t] %all be z  
foll[s3 7#a7 ,mak+ available a rese>*   
te/-b$ to private sector & academic     
rese>*]s1 on a subsidiz$ basis1 to      
engage 9 artificial intellig5ce security
 rese>*1 includ+ ?r\gh ! secure         
provision ( access 9 a secure environm5t
 to propriet>y ?ird-p>ty models ) !     
cons5t ( ! v5dors ( ! models4  7#b7     
,develop+ guidance to prev5t or mitigate
 c\nt]-artificial intellig5ce te*niques4
  7#c7 ,promot+ secure artificial       
intellig5ce adoption practices = manag]s
 ( national security sy/ems 7z def9$ 9  
section #ceeb ( title #dd1 ,unit$ ,/ates
 ,code7 & elem5ts ( ! def5se indu/rial  

base4  7#d7 ,coord9at+ ) ! ,artificial  
,intellig5ce ,safety ,in/itute )9 !     
,national ,in/itute ( ,/&>ds &          
,te*nology4  7#e7 ,su* o!r functions z !
 ,director consid]s appropriate4  7c7   
,te/-,b$ requirem5ts  7#a7 ,access &    
t]ms ( usage  7,a7 ,rese>*] access ,!   
,director %all e/abli% t]ms ( usage     
gov]n+ rese>*] access to ! te/-b$ made  
available "u subsection 7b77#a71 )      
limitations on rese>*] publication only 
to ! ext5t necess>y to protect classifi$
 in=mation or propriet>y in=mation      
conc]n+ ?ird-p>ty models provid$ ?r\gh !
 cons5t ( model v5dors4  7,b7           
,availability to ,f$]al ag5cies ,!      
,director %all ensure t ! te/-b$ made   
available "u subsection 7b77#a7 is also 
made available to o!r ,f$]al ag5cies on 
a co/-recov]y basis4  7#b7 ,use ( c]ta9 
infra/ructure & o!r res\rces ,9 c>ry+   
out subsection 7b77#a71 ! ,director %all
 lev]age1 to ! greate/ ext5t            
practicable1 infra/ructure & o!r        
res\rces provid$ "u section #e4b ( !    

,executive ,ord] dat$ ,octob] #cj1 #bjbc
 7relat+ to safe1 secure1 & tru/wor?y   
developm5t & use ( artificial           
intellig5ce74  7d7 ,access to propriet>y
 models ,9 c>ry+ out ?is section1 ,!    
,director %all e/abli% su* me*anisms z !
 ,director consid]s appropriate1 includ+
 pot5tial contractual inc5tives1 to     
ensure ! provision ( access to          
propriet>y models by qualifi$ indep5d5t1
 ?ird-p>ty rese>*]s1 provid$ t comm]cial
 model v5dors h volunt>ily provid$      
models & associat$ res\rces = su* te/+4