NIST released the preliminary draft of NIST IR 8596, the Cybersecurity Framework Profile for Artificial Intelligence ('Cyber AI Profile'), on December 16, 2025, with comments due January 30, 2026. It applies the CSF 2.0 structure to three focus areas: securing AI system components (Secure), conducting AI-enabled cyber defense (Defend), and thwarting AI-enabled cyberattacks (Thwart). NIST said comments would inform an initial public draft expected in 2026; as of August 2026 that draft had not been published.
| Document | NIST IR 8596 (Cyber AI Profile) — Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile), NIST IR 8596 — preliminary draft |
| Issued by | National Institute of Standards and Technology — AI Risk Management Framework |
| Type | Consultation |
| Status | Proposed · comment period closed |
| Published | Dec 16, 2025 |
| Comment deadline | Jan 30, 2026 |
| Applies to | Voluntary; organizations that use the NIST Cybersecurity Framework 2.0 and develop, deploy or defend against AI. Directly relevant to bank CISOs whose programs are CSF-aligned. |
| Official source | csrc.nist.gov ↗ |
| Use cases | Cybersecurity · Fraud detection · Generative & agentic AI · AI governance (general) |
What are the key points of NIST IR 8596 (Cyber AI Profile)?
- Preliminary draft published December 16, 2025 by NIST's Computer Security Division; 45-day comment period closed January 30, 2026.
- Built on Cybersecurity Framework 2.0 (February 2024): for each CSF subcategory it explains what changes when the organization is securing AI, using AI for defense, or facing AI-enabled attackers.
- Three focus areas: Secure (AI components, data, models, pipelines), Defend (AI in SOC and detection workflows), Thwart (AI-augmented phishing, deepfakes, automated exploitation).
- Intended to be used with the AI RMF, AI 100-2 adversarial ML taxonomy and SP 800-53 controls rather than replace them.
- Next step is an initial public draft incorporating the preliminary-draft comments, then a final version.
What did NIST IR 8596 (Cyber AI Profile) change for banks?
For banks whose security programs are already mapped to CSF 2.0 — which examiners and the FFIEC cybersecurity tooling encourage — the Cyber AI Profile is the most direct route to extending existing control mapping to AI systems without adopting a new framework. It also formalizes the 'Thwart' angle: AI-enabled fraud and social engineering as a cybersecurity-program concern, not only a fraud-team concern.
What is the NIST Cyber AI Profile?
A draft profile (NIST IR 8596) applying Cybersecurity Framework 2.0 to AI: securing AI systems, using AI for cyber defense, and defending against AI-enabled attacks. The preliminary draft was released December 16, 2025; comments closed January 30, 2026.
Is NIST IR 8596 final?
No. As of August 2026 only the preliminary draft has been published. NIST has said an initial public draft will follow, then a final version.
| Date | Document | Status |
|---|---|---|
| Apr 7, 2026 | AI RMF critical-infrastructure profile (concept note) — Concept Note: AI RMF Profile on Trustworthy AI in Critical Infrastructure | Proposed |
| Jan 12, 2026 | CAISI RFI on AI agent security (2026) — Request for Information: Security Considerations for Artificial Intelligence Agents | Proposed |
| Aug 14, 2025 | NIST COSAiS control overlays — Control Overlays for Securing AI Systems (COSAiS): SP 800-53 overlays for generative, predictive and agentic AI | Proposed |
| Mar 24, 2025 | NIST AI 100-2e2025 (Adversarial ML) — Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations (NIST AI 100-2e2025) | Final |
| Jul 26, 2024 | NIST AI 600-1 (Generative AI Profile) — Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile (NIST AI 600-1) | In force |
| Jan 26, 2023 | NIST AI RMF 1.0 — Artificial Intelligence Risk Management Framework (AI RMF 1.0), NIST AI 100-1 | In force |
Follow every document these regulators publish
6 curated AI stories for banking executives · Every morning · Free
Subscribe to BankingNewsAI →