SIIA Comments on NIST’s Cybersecurity Framework Profile for AI

The Software & Information Industry Association (SIIA) submitted formal comments to the National Institute of Standards and Technology (NIST) on its initial draft of NIST IR 8596, the Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile). SIIA supports NIST's effort to develop a voluntary, risk-based tool that integrates AI-specific cybersecurity considerations into the Cybersecurity Framework 2.0 without creating a prescriptive or duplicative compliance regime.

In its comments, SIIA emphasizes the importance of clear role definitions and shared responsibility across the AI ecosystem, practical guidance for real-world implementation, and international interoperability. The association also recommends strengthening lifecycle security guidance, addressing emerging AI-specific risks such as agentic behavior and prompt injection, and providing implementer-friendly formats to support scalable adoption across organizations of different sizes and maturity levels.