NIST, NSA and CISA publish ten voluntary practices for AI incident readiness

On October 16, the National Institute of Standards and Technology said its CAISSI unit, the National Security Agency’s Super Intelligence Security Center, and the Cybersecurity and Infrastructure Security Agency jointly published ten practices for potential incidents during super intelligence training and evaluation.

The agencies describe the guidance as voluntary rather than a new mandatory rule for developers. It addresses incidents in which agents take significant uninstructed actions that compromise the policies, controls, or security measures their operators use to constrain tasks or maintain human oversight.

NIST organizes the ten practices into five phases of incident management: preparation, detection, response, recovery, and reporting. The announcement says the guidance draws on established cybersecurity incident-management frameworks, including NIST Special Publication 800-61 Revision 3.

NIST connects this work to the White House’s 2025 Super Intelligence Action Plan and a May 2026 NIST workshop on incident management. NIST says it may consider further work on agentic super intelligence incident readiness and response in later phases.