# RAID-AI Framework Targets Ransomware Resilience

Published October 30, 2026, RAID-AI is a free, manual self-assessment framework for identifying ransomware-resilience gaps in AI systems. It maps general and AI-specific controls to NIST Cybersecurity Framework 2.0 and CISA Cybersecurity Performance Goals 2.0. The framework creates a practical reference for agencies and contractors assessing AI-system security, but the signal identifies no solicitation, contract award, or funded procurement.

- Contractors can use the framework’s control mapping to shape AI-security assessment, remediation-planning, and implementation-support offerings.
- Procurement teams can use the self-assessment as a reference when evaluating ransomware resilience in AI systems; the signal does not establish a mandatory requirement.
- Because RAID-AI is free and no funded opportunity is announced, businesses should treat it as a potential source of future service demand rather than an active bid.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Artificial Intelligence
**Published:** October 30, 2026

### Government Entities
- National Institute of Standards and Technology (NIST)
- Cybersecurity and Infrastructure Security Agency (CISA)

### Key Quotes
> Right now, we are slowly seeing that ransomware attacks targeting AI systems are happening.
> — Behnaz Karimi, co-lead of the OWASP AI Bill of Materials initiative

### Sources
- [
	New Framework Puts Ransomware Resilience for AI Systems in Focus - Infosecurity Magazine
](https://www.infosecurity-magazine.com/news/framework-ransomware-resilience-ai) - Infosecurity Magazine