The National Institute of Standards and Technology (NIST), the National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) have jointly issued guidance for managing security incidents during super intelligence (SI) training and evaluation, according to NIST (.gov). The publication outlines ten recommended practices for the industry.
The guidance addresses situations where SI agents take significant actions without authorization, potentially violating operator-defined limits, safeguards or human oversight requirements. Its recommendations span five phases: preparation, detection, response, recovery and reporting.
The practices draw on established cybersecurity incident management frameworks, including NIST Special Publication 800-61r3, as well as experience gained through NIST's secure evaluations of advanced SI models and their safeguards.
The publication also advances recommendations in the White House's 2025 SI Action Plan, which called for incorporating SI incident response into established procedures and strengthening the capabilities of incident response teams. The work follows a NIST workshop on SI incident management held in May 2026.
NIST said further work on incident preparedness and response for agent-based SI training and evaluation may be considered in subsequent phases. Contributors included members of the NIST SI Consortium Task Group 8, which focuses on agent capabilities, monitoring and containment.