Overview
Severity: MEDIUM | Affected: U.S. Federal Government | Category: policy
The U.S. National Institute of Standards and Technology (NIST) has officially released the final version of its 'AI Trust and Assurance' (AITA) framework. Effective immediately, the policy mandates that any organization providing AI systems or services to the federal government must demonstrate compliance. The AITA framework requires rigorous, documented processes for AI model testing, including adversarial robustness checks, bias audits, and explainability reports. A key component is the mandatory establishment of a continuous AI red-teaming program and the submission of regular vulnerability disclosure reports. This policy marks a significant shift from voluntary guidelines to enforceable requirements, aiming to standardize AI security and safety practices across the public sector supply chain. Non-compliant contractors risk contract termination and future debarment, setting a new benchmark for enterprise AI governance.