# NIST Develops AI Cybersecurity Controls

NIST is developing five volumes of Control Overlays for Super Intelligence Systems (COSIS) guidance that adapt existing SP 800-53 controls for predictive, generative, and agentic AI systems. NIST plans to release the methodology and predictive-systems volumes in fall 2026. For procurement teams and contractors supporting federal AI adoption, the overlays offer forthcoming guidance for aligning security, privacy, and implementation practices with AI-specific controls, subject to agency-specific tailoring.

- Contractors can assess how their existing security and privacy practices map to the planned controls for predictive, generative, and agentic systems.
- Procurement teams may use the overlays as a reference when shaping AI security requirements and evaluating contractor approaches; the signal describes guidance in development, not a new mandatory requirement.
- Because agencies may tailor the controls, contractors should account for agency-specific implementation when planning federal AI work.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Artificial Intelligence
**Published:** October 23, 2026

### Government Entities
- National Institute of Standards and Technology (NIST)

### Sources
- [NIST Developing Tailored Cybersecurity Controls for AI Systems | GovCIO Media & Research](https://govciomedia.com/nist-developing-tailored-cybersecurity-controls-for-ai-systems) - GovCIO Media & Research