“CISA AI use cases” covers three different things: capabilities the agency says it is interested in, how it plans to use AI in support of its mission, and work that helps government and industry secure AI systems. CISA’s published list identifies ten areas of interest, but it is not an inventory of tools confirmed to be deployed. Its 2023–2024 roadmap sets out five lines of effort, while separate guidance and collaboration resources address secure AI development and cybersecurity incidents.
What CISA means by AI use cases
The phrase spans three related but distinct scopes:
As an Amazon Associate I earn from qualifying purchases.
- Technology interests: capabilities CISA has identified as relevant to its cybersecurity and critical-infrastructure mission. The list signals areas of interest, not confirmed procurement, production deployment, or measured performance. CISA Technologies of Interest
- Agency mission use: the roadmap’s plan to use AI responsibly to support CISA’s own work.
- Securing AI: guidance and collaboration that help organizations develop, use, and defend AI systems.
Keeping these scopes separate matters: a capability CISA is interested in is not necessarily a system the agency currently operates.
Ten AI capability areas CISA identifies
CISA frames its technology interests around deterring and responding to cyber threats, deploying new capabilities rapidly, and updating existing models while minimizing risk. Its Technologies of Interest page names these ten areas:
- Adversarial AI countermeasures: addressing attempts to manipulate or exploit AI systems.
- AI for Zero Trust Architecture (ZTA): exploring AI in support of Zero Trust security approaches.
- AI-powered cyber defense: applying AI capabilities to cyber defense and threat response.
- AI training and inference hardware security: protecting the hardware involved in training and running AI models.
- AI system assurance: assessing whether AI systems meet relevant security and reliability expectations.
- Autonomous AI systems: considering systems that can perform tasks with greater independence.
- Emergency communication chatbots: using conversational systems in emergency communications.
- Intelligent automation: applying automation to operational workflows.
- LLM prompt engineering: developing and using prompts to direct large language models.
- ML drift detection: identifying when a machine-learning model’s behavior changes over time.
These examples describe the function of each area, not specific CISA deployments. The page does not establish which capabilities have been acquired, put into production, or evaluated for outcomes. CISA Technologies of Interest
How CISA’s AI roadmap organizes the work
CISA’s 2023–2024 Roadmap for Artificial Intelligence organizes the agency’s approach into five lines of effort:
- Use AI responsibly to support CISA’s mission, consistent with applicable law and policy.
- Assure AI systems and support secure-by-design adoption.
- Protect critical infrastructure from malicious uses of AI.
- Collaborate and communicate with interagency, international, and public partners.
- Expand AI expertise across CISA’s workforce.
The roadmap states: “CISA will use AI-enabled software tools to strengthen cyber defense and support our critical infrastructure mission.” It also says responsible adoption must be consistent with the Constitution and applicable laws and policies, including those concerning federal procurement, privacy, civil rights, and civil liberties. That makes governance and workforce capability part of the strategy alongside technical tools. CISA 2023–2024 Roadmap for Artificial Intelligence
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Secure-AI guidance and collaboration
Guidance for AI system developers
On November 26, 2023, CISA and the UK National Cyber Security Centre announced joint Guidelines for Secure AI System Development. The guidance is aimed primarily at AI system providers, including providers that host models themselves and those that use external APIs. CISA describes it as complementing a secure-by-design approach. CISA and UK NCSC release joint guidelines for secure AI system development
Voluntary information sharing through JCDC
On January 14, 2025, CISA announced the JCDC AI Cybersecurity Collaboration Playbook and a fact sheet. The playbook describes voluntary information-sharing processes for government, industry, and international partners dealing with cybersecurity incidents and vulnerabilities associated with AI systems. It also covers protections for shared information and describes CISA’s actions after receiving it. CISA releases JCDC AI Cybersecurity Collaboration Playbook and fact sheet
Tabletop preparedness
CISA’s JCDC Plans & Resources page lists a JCDC Artificial Intelligence Cyber Tabletop Exercise. Its listing supports an operational-preparedness angle: exercises can give participating organizations a way to plan for AI-related cyber incidents. The page listing alone does not establish exercise results or participation figures. JCDC Plans & Resources
Rank #4
What the current Cybersecurity Performance Goals say about AI
CISA’s Cybersecurity Performance Goals FAQ says the current version of the CPGs does not yet explicitly address AI. It also says AI security is a CISA priority and that the agency is assessing how AI should be addressed in the goals and how the goals might inform secure AI development. This qualification applies to the current CPG version; it does not mean CISA has no other AI work, as its roadmap, secure-development guidance, and JCDC resources show. CISA Cybersecurity Performance Goals FAQs
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
How to interpret CISA’s published use cases
The materials describe different kinds of activity, with different levels of evidence. A technology-interest list is not the same as an agency deployment; published guidance is not the same as a tested product; and an announced collaboration resource is not evidence of a measured security outcome.
Quick Recap
| Activity type | Purpose | Primary party or audience | What the cited material establishes |
|---|---|---|---|
| Technology interests | Identify relevant AI capabilities for cyber defense and critical-infrastructure work | CISA and potential technology stakeholders | Stated areas of interest; no deployment inventory or outcome metrics |
| Roadmap | Guide responsible mission use, AI assurance, infrastructure protection, collaboration, and workforce expertise | CISA | Five strategic lines of effort for 2023–2024 |
| Secure-development guidance | Encourage secure AI system development | Primarily AI system providers | Joint guidance announced by CISA and the UK NCSC in November 2023 |
| JCDC playbook and exercise listing | Support voluntary sharing and preparedness for AI-related cybersecurity issues | Government, industry, and international partners | A playbook announced in January 2025 and a tabletop exercise listed on CISA’s JCDC page; no outcome figures stated |
| Cybersecurity Performance Goals | Set cybersecurity goals that organizations can use | Organizations using the CPGs | CISA’s FAQ says the current version does not yet explicitly address AI |
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
