# CAISI RFI on AI agent security (2026): Request for Information: Security Considerations for Artificial Intelligence Agents

Source: https://www.bankingnewsai.com/ai-regulation/documents/nist-caisi-rfi-ai-agent-security-2026
Last updated: Aug 26, 2026

On January 12, 2026 NIST's Center for AI Standards and Innovation (CAISI) issued a Request for Information on security considerations for AI agents — systems that plan and take autonomous actions affecting real-world systems — with comments due March 9, 2026 (docket NIST-2025-0035). It asked about adversarial threats such as indirect prompt injection, data poisoning and insecure deployment, misaligned behavior such as specification gaming, measurement approaches for agent security, and safeguards for constraining and monitoring agent access in production.

## At a glance

| Field | Value |
| --- | --- |
| Authority | [NIST](https://www.bankingnewsai.com/ai-regulation/nist) |
| Type | Consultation |
| Status | Proposed · comment period closed |
| Published | Jan 12, 2026 |
| Comment deadline | Mar 9, 2026 |
| Applies to | Public RFI; input sought from AI developers, deployers and security researchers. Informs forthcoming NIST/CAISI agent-security guidance relevant to any bank deploying agentic AI. |
| Official text | https://www.federalregister.gov/documents/2026/01/13/2026-00206/request-for-information-security-considerations-for-artificial-intelligence-agents |

## Key points

- Issued January 12, 2026; Federal Register notice 2026-00206; comments closed March 9, 2026.
- Defines the scope as AI agents that combine model outputs with software functionality to plan and act autonomously.
- Topic areas: adversarial threats (indirect prompt injection), model vulnerabilities (poisoning, insecure deployment), misaligned behavior (specification gaming, unintended harmful actions), measurement and evaluation, and deployment safeguards (constraining and monitoring access).
- Feeds CAISI's AI Agent Standards Initiative launched February 17, 2026, which also includes an NCCoE concept paper on software and AI agent identity and authorization and sector listening sessions naming financial services.
- No guidance document had been published from the RFI as of August 2026.

## What changed for banks

The RFI is the first formal US federal fact-finding specifically on securing AI agents and signals what NIST guidance will cover: agent identity and authorization, least-privilege tool access, monitoring and kill-switches, and prompt-injection defenses. Banks piloting agents for operations, servicing or coding can use its topic list as a preview of the control expectations examiners are likely to import.

## Use cases it governs

- [Generative & agentic AI](https://www.bankingnewsai.com/ai-regulation/by-use-case#generative-agentic-ai)
- [Cybersecurity](https://www.bankingnewsai.com/ai-regulation/by-use-case#cybersecurity)
- [AI governance (general)](https://www.bankingnewsai.com/ai-regulation/by-use-case#governance-general)
- [AI-generated code & coding agents](https://www.bankingnewsai.com/ai-regulation/by-use-case#ai-generated-code)

## FAQ

### What did NIST's 2026 AI agent security RFI ask about?

Threats to AI agents (indirect prompt injection, data poisoning, insecure deployment), misaligned agent behavior, ways to measure agent security, and safeguards for constraining and monitoring agents in production. Comments closed March 9, 2026.

### What is CAISI?

The Center for AI Standards and Innovation within NIST, renamed from the US AI Safety Institute in 2025. It leads NIST's AI agent standards work, including the January 2026 security RFI and the February 2026 AI Agent Standards Initiative.

## Related documents

- [AI RMF critical-infrastructure profile (concept note)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-rmf-critical-infrastructure-profile-concept-note) — Concept Note: AI RMF Profile on Trustworthy AI in Critical Infrastructure (Apr 7, 2026)
- [NIST IR 8596 (Cyber AI Profile)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ir-8596) — Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile), NIST IR 8596 — preliminary draft (Dec 16, 2025)
- [NIST COSAiS control overlays](https://www.bankingnewsai.com/ai-regulation/documents/nist-cosais-control-overlays) — Control Overlays for Securing AI Systems (COSAiS): SP 800-53 overlays for generative, predictive and agentic AI (Aug 14, 2025)
- [NIST AI 100-2e2025 (Adversarial ML)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-100-2e2025) — Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations (NIST AI 100-2e2025) (Mar 24, 2025)
- [NIST AI 600-1 (Generative AI Profile)](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-600-1) — Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile (NIST AI 600-1) (Jul 26, 2024)
- [NIST SP 800-218A (SSDF profile for generative AI)](https://www.bankingnewsai.com/ai-regulation/documents/nist-sp-800-218a) — Secure Software Development Practices for Generative AI and Dual-Use Foundation Models: An SSDF Community Profile (NIST SP 800-218A) (Jul 26, 2024)
- [NIST AI RMF 1.0](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-100-1) — Artificial Intelligence Risk Management Framework (AI RMF 1.0), NIST AI 100-1 (Jan 26, 2023)
- [NIST AI RMF Playbook](https://www.bankingnewsai.com/ai-regulation/documents/nist-ai-rmf-playbook) — AI Risk Management Framework Playbook (Jan 26, 2023)

Last reviewed Aug 26, 2026. Cite the official text (https://www.federalregister.gov/documents/2026/01/13/2026-00206/request-for-information-security-considerations-for-artificial-intelligence-agents) for the rule and this page for the summary and dates.

---

Canonical page: https://www.bankingnewsai.com/ai-regulation/documents/nist-caisi-rfi-ai-agent-security-2026
Part of [BankingNewsAI](https://www.bankingnewsai.com/) — a free daily brief on AI in banking, an AI regulation tracker (41 authorities, 238 documents) and AI-strategy profiles of the 120 largest US banks. Markdown versions of every reference page: append `.md` to the page URL; index at https://www.bankingnewsai.com/llms.txt.