A few months ago this year, I wrote about an AI Security Incident tabletop exercise led by the Cybersecurity and Infrastructure Security Agency's (CISA) Joint Cyber Defense Collaborative (JCDC). This exercise brought together industry leaders and government agencies.?? 

CISA used the insights gained from these exercises to develop an AI Security Incident Collaboration Playbook, which serves as a guide for enhancing effective operational collaboration among government agencies, private industry and international stakeholders. To refine the Playbook, a second tabletop exercise was conducted, involving AI companies including Cisco and critical infrastructure organizations actively deploying AI in their operational frameworks. This process ensured that the Playbook was practical, actionable, and aligned with real-world challenges.? 

Today, CISA officially released the Playbook, making it publicly accessible to professionals and organizations across the industry. This great resource will help enhance preparedness, streamline response coordination and strengthen resilience against AI-related security incidents, offering valuable guidance to stakeholders navigating the complex task of securing AI systems.? 

To develop this playbook, CISA convened numerous AI and cybersecurity experts from government and industry engaging in table-top exercises, discussion, and collaboration.? My colleagues Alie Fordyce, Hyrum Anderson and Josh Jackson actively participated in the table-top exercises and contributed to the creation of the playbook. With this deep pool of knowledge and wide spectrum of perspectives, we were able to develop best practices to address the quickly evolving landscape of AI and cybersecurity.?? 

The Playbook:? 

• Provides guidance on how to voluntarily share information related to incidents and vulnerabilities associated with AI systems.?
• Enables collaboration among the U.S. federal government, private industry, international government counterparts and the AI community to raise awareness of AI cybersecurity risks across critical infrastructure, enhancing the security and resilience of AI technologies.? 
• Provides actionable information-sharing guidance for Sector Risk Management Agencies (SRMAs), other agencies, and other stakeholders.? 

 For more insights into CISA's work and AI security initiatives, visit CISA's Artificial Intelligence and JCDC pages.? Or, view the JCDC AI Cybersecurity Collaboration Playbook and Fact Sheet.

We'd love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Secure on social!