NIST IR 8596 (draft) introduces a “Cybersecurity AI Profile” as a community profile to help organizations manage cybersecurity risk in AI systems and, in parallel, to guide the use of AI to strengthen cybersecurity capabilities. It is structured around the NIST Cybersecurity Framework (CSF) 2.0, mapping outcomes and practices that are intended to be broadly applicable to organizations that develop, integrate, or consume AI systems, including LLMs and other GenAI-enabled capabilities.

From an impact perspective, the profile frames risk and controls across three complementary focus areas: securing AI systems (Secure), defending with AI (Defend), and countering AI-enabled threats (Thwart). It spans technical risks (e.g., data leakage, data poisoning, prompt injection, performance degradation from model drift) and operational requirements such as monitoring and traceability, incident response, and coordinated third-party/supply-chain management for AI services, components, and data dependencies.

WHO?

According to a document from (December 2025) (NIST IR 8596 iprd, Cybersecurity AI Profile: NIST Community Profile), the profile is intended for any organization that (1) uses AI technologies (either stand-alone AI systems like chatbots/summarizers or AI-enabled capabilities embedded in other systems), regardless of whether it builds or purchases them; (2) wants to understand and leverage AI to enhance cybersecurity capabilities (e.g., AI analytics in security tools); (3) wants to better understand and defend against AI-enabled cyber-attacks (e.g., AI-generated malicious emails); and (4) is developing AI systems.

CONCLUSION:

NIST IR 8596 (draft) indicates that securing AI systems and using AI for cyber defense requires an end-to-end approach aligned to the NIST CSF 2.0 because AI introduces distinct technical and operational risks (e.g., data leakage, data poisoning, prompt injection, and performance degradation from model drift), expands third-party and supply-chain dependencies, and enables attackers to scale and accelerate cyber operations; therefore, the profile emphasizes managing risk across the three focus areas—Secure, Defend, and Thwart—strengthening governance, monitoring/traceability, and coordinated incident response with suppliers to sustain effective risk control for AI-enabled solutions and devices.