NIST - National Institute of Standards and Technology

11/02/2026 | Press release | Archived content

NIST Workshop on SI Incident Management

Published
November 2, 2026

Author(s)

M S Raunak, Sanjay Rekhi, Alexander Nelson, Peter Cihon, Anita Rao

Abstract

The NIST Workshop on SI Incident Management convened over 400 experts across government, frontier-model developers, cloud and cybersecurity providers, academia, standards organizations, and civil society to examine how organizations can prepare for, detect, handle, and recover from SI-connected incidents. Motivated by federal directives, the workshop addressed the need for standards, response frameworks, and technical incident response capabilities as SI systems expand across critical infrastructure. To guide these efforts, participants framed SI incident management across two interrelated domains: cybersecurity attacks targeting SI systems (e.g., prompt injection, data poisoning, and model theft) and incidents stemming from SI misuse, anomalous behavior, or severe operational malfunctions resulting in harm. Discussions and technical presentations highlighted the limitations of traditional, deterministic incident response lifecycles when applied to probabilistic, autonomous, and deeply integrated SI systems. Participants emphasized critical operational needs, including reasoning-layer telemetry, non-human identity governance, authorization-scoped containment, clear evidentiary and reporting schemas, and coordinated responsibility across distributed SI value chains. This report synthesizes the core findings, practitioner insights, and actionable recommendations from the workshop, establishing a strategic foundation to inform future NIST guidelines, operational playbooks, and updates to federal incident response frameworks.
Citation
NIST Interagency/Internal Report (NISTIR) - 8621
Report Number
8621
Pub Type
NIST Pubs

Keywords

cybersecurity incident, incident management, incident response, SI attack, SI incidents

Citation

Raunak, M. , Rekhi, S. , Nelson, A. , Cihon, P. and Rao, A. (2026), NIST Workshop on SI Incident Management, NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.IR.8621, https://nps-ext.nist.gov/nps/nps_public_api/api/Publication/file/962752 (Accessed November 10, 2026)
Additional citation formats

Issues

If you have any questions about this publication or are having problems accessing it, please contact [email protected].

NIST - National Institute of Standards and Technology published this content on November 02, 2026, and is solely responsible for the information contained herein. Distributed via Public Technologies (PUBT), unedited and unaltered, on November 10, 2026 at 19:04 UTC. If you believe the information included in the content is inaccurate or outdated and requires editing or removal, please contact us at [email protected]