CIS Launches AI Cyber Defense Pilot for State and Local Governments

The Center for Internet Security (CIS) has announced a pilot program, with the Multi-State Information Sharing and Analysis Center (MS-ISAC) and OpenAI, to explore how AI can help state and local governments defend their networks (CIS announcement via The National Law Review).

What the pilot covers

Participants, drawn from state, local, tribal and territorial governments and critical-infrastructure organizations of different sizes and security maturity, will use OpenAI’s technology to identify and prioritize security findings, aligned with the CIS Critical Security Controls. The pilot looks at detecting risks faster, prioritizing security work, strengthening basic cyber hygiene and improving overall readiness.

What we don’t know yet

The announcement gives no timeline and reports no results. CIS says the pilot will produce implementation guidance, lessons learned and recommendations. Until those are published, claims about how much time or risk the AI saves are speculation.

Why small public bodies should watch it

Many towns and counties have no full-time security staff, which is the gap this pilot targets. Whatever comes of it, the controls it aligns with start with knowing what you expose: check your public IPs with a port scan, keep certificates current, and check that mail servers aren’t on spam blocklists.