On Thursday, June 13, CISA conducted the federal government's inaugural tabletop exercise with the private sector focused on effective and coordinated responses to artificial intelligence (AI) security incidents. The four-hour exercise brought together more than 50 AI experts from government agencies and industry partners.
The exercise simulated a cybersecurity incident involving an AI-enabled system and participants worked through operational collaboration and information sharing protocols for incident response across the represented organizations. The TTX focused on capturing information beyond conventional cybersecurity incidents to help identify information sharing opportunities, protocols for public-private engagement, and areas for operational collaboration on AI security incidents.
Primary objectives of this exercise were to:
- Explore the information sharing opportunities for cyber incidents involving an AI-enabled system.
- Examine industry participants’ response procedures and best practices when dealing with a multistage AI incident.
- Identify areas for improvement in industry and government AI incident response plans, information sharing, and overall organizational resilience during and following a significant AI incident.
- Assess information sharing capabilities, needs, and priorities for operational collaboration on cyber incidents involving an AI-enabled system between interagency government partners, industry, and international participants.
The tabletop exercise is supporting the development of an AI Security Incident Collaboration Playbook spearheaded by JCDC.AI to capture lessons learned during play. The playbook, slated for publication by year-end, will facilitate AI security incident response coordination efforts between government, industry, and global partners. For more about the exercise, visit CISA.
Analyst comment (Jennifer Lyn Walker): As part of this effort, CISA published the Scenario Document used during play. The document includes the three modules with respective injects, discussion questions, and desired discussion outcomes. Members are encouraged to review the scenario document and consider using it in future team-based activities to exercise information sharing.
Additional AI Resources from CISA
