# CISA and Allies Issue AI Token Guidance

CISA and cybersecurity agencies in Canada, Australia, New Zealand, and the United Kingdom issued joint guidance on managing AI token consumption, reducing denial-of-tokens and denial-of-wallet risks, and maintaining operational continuity. For contractors supporting federal and allied AI deployments, the guidance signals increased attention to token-cost controls, usage monitoring, provider quotas, and resilience in AI service planning and contract requirements. CISA is scheduled to appear at the 2026 Homeland Security Summit on November 10, 2026 (17 days away).

- Contractors can evaluate how their AI services track token usage, control costs, apply provider quotas, and sustain service during disruptions, and reflect those capabilities in relevant proposals and service plans.
- Procurement teams may find these controls relevant when defining or evaluating requirements for AI services supporting government operations; the signal describes guidance, not a new mandatory compliance rule.
- Stakeholders seeking further discussion can attend CISA’s scheduled appearance at the Homeland Security Summit on November 10.

**Jurisdictions:** international
**Industries:** Information Technology
**Topics:** Artificial Intelligence, Cybersecurity
**Published:** October 23, 2026

### Government Entities
- Cybersecurity and Infrastructure Security Agency (CISA)
- Canadian Centre for Cyber Security
- Australian Signals Directorate’s Australian Cyber Security Centre (ASD ACSC)
- New Zealand’s National Cyber Security Centre (NCSC)
- National Cyber Security Centre of the United Kingdom (NCSC)

### Sources
- [CISA, Allies Issue AI Token Consumption Guidance](https://www.executivegov.com/articles/cisa-allies-ai-token-guidance-denial-of-wallet) - ExecutiveGov