Draft. NIST may change this document before it is final. Use it to plan, and check CSRC for the final version.
Revision in progress. Initial preliminary draft; NIST announced spring 2026 working sessions. No public draft or final yet.
Key concepts
The draft is organized by CSF 2.0 functions, categories and subcategories with AI-specific considerations. NIST held working sessions in 2026 to shape the next draft.
How it is organized
- CSF 2.0 functions, categories and subcategories with AI considerations
- Securing AI systems
- Using AI for cyber defense
What a school district should take from it
- Expect future CSF-aligned guidance on AI to follow this structure.
- Security tools with AI features still need the same governance as other tools.
How to use it in your district
- Skim it when evaluating security products that advertise AI features.
- Track NIST's progress before citing it in district policy.
- Use the AI RMF and Generative AI Profile for current guidance.
Common misconceptions
- This is NIST's final AI security guidance.
- It is a preliminary draft; comments closed in January 2026 and later drafts will change it.
Rubric categories and K12 Cyber Forward tools
Cybersecurity Rubric 2.0 categories
- GV.RMRisk Management Strategy
- PR.PSPlatform Security
- DE.CMContinuous Monitoring
Tools in the program portal
- Policy BuilderDraft policy language tied to rubric categories
Related publications
- AI RMF 1.0 (NIST AI 100-1)AI Risk Management Framework
- NIST AI 600-1Generative AI risk profile
Citation and source
IR 8596 (preliminary draft), Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile): NIST Community Profile. National Institute of Standards and Technology. 2025 (draft). https://doi.org/10.6028/NIST.IR.8596.iprd.
Topics: Artificial intelligence, Frameworks and profiles. This summary was written by the K12 Cyber Forward program team in its own words. NIST is not affiliated with the program and has not reviewed it. The official publication on csrc.nist.gov controls.