,,ii #aaith ,,congress #ast ,session ,s4 #cbjb ,,in ,,the ,,senate ,,of ,,the ,,united ,,states ,november #ai1 #bjbe,mr4 ,young 7for himself and ,mr4 ,kelly7 introduced the following bill2 which was read twice and referred to the ,select ,committee on ,intelligence ,a ,,bill ,to direct the ,director of the ,national ,security ,agency to develop guidance to secure artificial intelligence related technologies1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,advanced ,artificial ,intelligence ,security ,readiness ,act of #bjbe4 #b4 ,artificial intelligence security guidance 7a7 ,requirement ,the ,director of the ,national ,security ,agency1 acting through the ,artificial ,intelligence ,security ,center 7or successor office71 shall develop and disseminate security guidance that identifies potential vulnerabilities in covered artificial intelligence technologies and artificial intelligence supply chains1 with a focus on cybersecurity risks and security challenges that are unique to protecting artificial intelligence systems1 associated computing environments1 or the wider artificial intelligence supply chain from theft or sabotage by foreign threat actors4 7b7 ,elements ,the guidance developed and disseminated under subsection 7a7 shall include the following3 7#a7 ,identification of potential vulnerabilities and cybersecurity challenges that are unique to protecting covered artificial intelligence technologies and the artificial intelligence supply chain1 such as threat vectors that are less common or severe in conventional information technology systems4 7#b7 ,identification of elements of the artificial intelligence supply chain that1 if accessed by threat actors1 would meaningfully contribute to the actor's ability to develop covered artificial intelligence technologies or compromise the confidentiality1 integrity1 or availability of artificial intelligence systems or associated artificial intelligence supply chains4 7#c7 ,strategies to identify1 protect1 detect1 respond to1 and recover from cyber threats posed by threat actors targeting covered artificial intelligence technologies1 including-- 7,a7 procedures to protect model weights or other competitively sensitive model artifacts2 7,b7 ways to mitigate insider threats1 including personnel vetting processes2 7,c7 network access control procedures2 7,d7 counterintelligence and anti-espionage measures2 and 7,e7 other measures that can be used to reduce threats of technology theft or sabotage by foreign threat actors4 7c7 ,form ,the guidance developed and disseminated under subsection 7a7 shall include-- 7#a7 detailed best practices1 principles1 and guidelines in unclassified form1 which may include a classified annex2 and 7#b7 classified materials for conducting security briefings for service providers4 7d7 ,engagement ,in developing the guidance required by subsection 7a71 the ,director shall-- 7#a7 engage with prominent artificial intelligence developers and researchers1 as determined by the ,director1 to assess and anticipate the capabilities of highly advanced artificial intelligence systems relevant to national security1 including by-- 7,a7 conducting a comprehensive review of publicly available industry documents pertaining to the security of artificial intelligence systems with respect to preparedness frameworks1 scaling policies1 risk management frameworks1 and other matters2 7,b7 conducting interviews with subject matter experts2 7,c7 hosting roundtable discussions and expert panels2 and 7,d7 visiting facilities used to develop artificial intelligence2 7#b7 leverage existing expertise and research1 collaborate with relevant ,national ,laboratories1 university affiliated research centers1 and any federally funded research and development center that has conducted research on strategies to secure artificial intelligence models from nation-state actors and other highly resourced actors2 and 7#c7 consult1 as appropriate1 with other departments and agencies of the ,federal ,government as the ,director determines relevant1 including the ,bureau of ,industry and ,security of the ,department of ,commerce1 the ,center for ,artificial ,intelligence ,standards and ,innovation of the ,national ,institute of ,standards and ,technology1 the ,department of ,homeland ,security1 and the ,department of ,defense4 7e7 ,reports 7#a7 ,initial report ,not later than #ahj days after the date of the enactment of this ,act1 the ,director shall submit to the congressional intelligence committees a report on the guidance required by subsection 7a71 including a summary of progress on the development of the guidance1 an outline of remaining sections1 and any relevant insights about artificial intelligence security4 7#b7 ,final report ,not later than #cfe days after the date of enactment of this ,act1 the ,director shall submit to the congressional intelligence committees a report on the guidance required by subsection 7a74 7#c7 ,form ,the report submitted under paragraph 7#b7-- 7,a7 shall include-- 7i7 an unclassified version suitable for dissemination to relevant individuals1 including in the private sector2 and 7ii7 a publicly available version2 and 7,b7 may include a classified annex4 7f7 ,definitions ,in this section3 7#a7 ,the term artificial intelligence has the meaning given such term in section #bch7;g7 of the ,john ,s4 ,mc,cain ,national ,defense ,authorization ,act for ,fiscal ,year #bjai 7,public ,law #aae-bcb2 #aj ,u4,s4,c4 note prec4 #djfa74 7#b7 ,the term artificial intelligence supply chain means artificial intelligence models computing environments for performing model training or inference tasks1 training or test data1 frameworks1 or other components or model artifacts necessary for the training1 management1 or maintenance of any artificial intelligence system4 7#c7 ,the term congressional intelligence committees means the ,select ,committee on ,intelligence of the ,senate and the ,permanent ,select ,committee on ,intelligence of the ,house of ,representatives4 7#d7 ,the term covered artificial intelligence technologies means advanced artificial intelligence 7whether developed by the private sector1 the ,united ,states ,government1 or a public-private partnership7 with critical capabilities that the ,director determines would pose a grave national security threat if acquired or stolen by threat actors1 such as artificial intelligence systems that match or exceed human expert performance in chemical1 biological1 radiological1 and nuclear matters1 cyber offense1 model autonomy1 persuasion1 research and development1 and self-improvement4 7#e7 ,the term technology theft means any unauthorized acquisition1 replication1 or appropriation of covered artificial intelligence technologies or components of such technologies1 including models1 model weights1 architectures1 or core algorithmic insights1 through any means1 such as cyber attacks1 insider threats1 and side-channel attacks1 or exploitation of public interfaces4 7#f7 ,the term threat actors means nation-state actors and other highly resourced actors capable of technology theft or sabotage4