What changed

NIST released the preliminary Cyber AI Profile, mapping CSF 2.0 to three areas: securing AI systems, using AI for cyber defense and resisting AI-enabled attacks.

Why it matters

It gives security and AI teams a shared risk-management structure instead of treating model security, defensive automation and attacker use of AI as unrelated programs.

What to do

Map current controls to all three focus areas, assign owners for gaps, and preserve evidence of testing. Treat the draft as planning guidance until finalized.

Caveat

NIST IR 8596 was a preliminary draft for public comment, not a binding standard or completed control catalog. Specific implementation profiles and assurance methods still required development.