NIST Cyber AI Profile (IR 8596) and the SP 800-53 AI control overlays

What the Cyber AI Profile is

NIST's Computer Security Resource Center lists the document as NIST IR 8596, titled Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile): NIST Community Profile.

The abstract says the profile "will provide guidelines for managing cybersecurity risk related to AI systems as well as identifying opportunities for using AI to enhance cybersecurity capabilities."

On structure, the abstract states that the profile is organized using the Cybersecurity Framework 2.0 outcomes, meaning its Functions, Categories, and Subcategories.

The draft splits its content into three focus areas. NIST's page lists them as Securing AI System Components (Secure), Conducting AI-Enabled Cyber Defense (Defend), and Thwarting AI-enabled Cyber Attacks (Thwart).

For a security leader, this means the profile covers three separate questions. One is how to protect AI systems you run. The second is how to use AI in defense. The third is how to deal with attackers who use AI.

Where the draft stands

The document is a preliminary draft, and the status matters for how much weight to give it. The CSRC page gives a publication date of December 16, 2025, and a comment deadline of January 30, 2026. It also states that the public comment period is closed.

The abstract says the next step is an initial public draft, not a final standard. It states that comments received will inform the initial public draft.

The CSRC page also carries a planning note dated April 21, 2026. The note points to Spring 2026 Cyber AI Profile Virtual Working Sessions on April 28, May 5, and May 12, 2026.

The pages we reviewed do not give a date for the initial public draft or the final version. They also do not set any compliance deadline or requirement for organizations.

What the SP 800-53 AI control overlays are

The overlays are a separate NIST project. They began as the SP 800-53 Control Overlays for Securing AI Systems, known as COSAiS. The CSRC project page, updated October 20, 2026, says the project has been renamed SP 800-53 Control Overlays for Super Intelligence Systems (COSIS). The page attributes the rename to the September 29, 2026, Executive Order on Inaugurating the Era of Super Intelligence.

The project page also says previously issued documents and publications have not been altered. This guide uses COSAiS where it describes earlier documents and COSIS where it describes the current project page.

According to the project page, the project "will develop a series of overlays for securing SI systems using the NIST Special Publication (SP) 800-53 controls."

NIST describes the overlays as implementation-focused. The page says they address use cases involving different types of systems and specific components such as training and test data, and model weights and configuration settings.

The page states that the overlays focus on protecting confidentiality, integrity, and availability of information and users for each proposed use case.

The proposed use cases are:

• Adapting and Using Generative SI, as an assistant or large language model
• Using and Fine-Tuning Predictive SI
• Using SI Agent Systems, single agent
• Using SI Agent Systems, multi-agent
• Security Controls for SI Developers

The project page also records a naming directive. It states that executive departments and agencies shall use "Super Intelligence" and SI in place of "Artificial Intelligence" and AI.

How the profile and the overlays relate

The documents tie the two together through NIST's events and project pages, not through a stated technical mapping.

NIST's December 16, 2025, announcement invited readers to a hybrid workshop on January 14, 2026. The announcement says the workshop would cover the preliminary draft Cyber AI Profile and also updates on the SP 800-53 Control Overlays for Securing AI Systems.

The overlays project page also refers to the same event. Its entry of January 8, 2026, says an annotated outline of the overlay for Using and Fine-Tuning Predictive AI was made available to support discussion at the Cyber AI Profile Workshop #2.

The two efforts therefore share a workshop and an audience. They differ in form. The profile is a Cybersecurity Framework 2.0 document with three focus areas. The overlays are built on SP 800-53 controls and organized by use case.

None of the pages we reviewed says which profile outcome corresponds to which overlay or control. The profile page lists IR 8578 and IR 8607 as related NIST publications without describing them. Any mapping between the profile and the overlays is not set out in these sources.

What NIST's pages say you can do now

The sources do not give implementation steps for security teams. They do describe how NIST is taking input and how to follow the work.

For the profile, NIST recommends joining the NCCoE Cyber AI Community of Interest to stay up to date on progress.

For the overlays, the project page describes a concept paper. It says the SP 800-53 Control Overlays for Securing AI Systems Concept Paper was made available for comment on August 14, 2025.

The project page also asks for feedback on the annotated outline. It says initial feedback should be submitted by February 13, 2026, to be considered for the initial public draft.

The pages also mention a Slack community for discussion with NIST principal investigators. The project page says it is open for the overlays project, and the CSRC pages give an email contact for questions.

As of the pages we reviewed, the profile comment window had closed. The page dated October 20, 2026 shows the February 13, 2026 feedback date for the annotated outline had also passed. We found no open comment deadline on either page.

Naming notes for readers

The sources use different terms for the same work, which can make searching confusing.

The December 2025 pages use "Artificial Intelligence" and AI throughout. The October 20, 2026 overlays page uses "Super Intelligence" and SI. The IR 8596 page carries an announcement saying NIST is working to update its communications to incorporate the term "super intelligence" as directed.

The IR 8596 page itself still carries the title Cybersecurity Framework Profile for Artificial Intelligence. A team that tracks both efforts may need to search under both naming conventions to find all the material.

Summary

• IR 8596 is a preliminary draft Cybersecurity Framework 2.0 profile with three focus areas: Secure, Defend, and Thwart.
• The overlays project builds SP 800-53 control overlays for AI system use cases. As of October 20, 2026, its page calls the project COSIS.
• NIST's pages link the two through shared events, not through a published mapping.
• The pages describe no compliance requirement and no final publication date.
• Further drafts and updates are announced through the NCCoE community of interest and the overlays project page.