Trump signs Executive Order 14409 on frontier AI cybersecurity

Executive Order 14409, Promoting Advanced Artificial Intelligence Innovation and Security, directs federal agencies to harden government infrastructure against AI-enabled risks and work with the private sector to strengthen AI security, while setting up a voluntary pre-release review program for powerful frontier AI models.

President Donald Trump signed it on June 2, 2026.

What it is

The order frames advanced AI as both a national security asset and a cybersecurity risk, directing agencies to work with the private sector to modernize information systems, protect American AI intellectual property, and prioritize cyber defense against AI-enabled threats.

It is the latest in a series of executive orders addressing AI and cybersecurity issued by the administration.

What it requires

Within 30 days, CISA must issue Binding Operational Directives to expedite cyber defense of civilian federal systems and extend AI-enabled cybersecurity tools to state and local authorities and critical infrastructure operators such as rural hospitals, community banks, and local utilities.

The Treasury Department must also form an AI cybersecurity clearinghouse within 30 days to coordinate vulnerability scanning, validation, and patch distribution in voluntary collaboration with industry.

Within 60 days, Treasury, the NSA, and CISA must build a classified benchmarking process to determine when an AI model qualifies as a covered frontier model, and design a voluntary framework giving the government up to 30 days of pre-release access to such models before they reach other trusted partners.

The order expressly states it does not create any mandatory licensing, preclearance, or permitting requirement for developing, publishing, or releasing AI models.

The order also directs the Attorney General to prioritize enforcement of existing computer fraud, identity fraud, and wire fraud statutes against anyone who uses AI to illegally access or damage a computer system.

Legal analysts note the order does not define covered frontier model.

What security leaders should do

CISOs at organizations in named critical infrastructure sectors should identify how their sector will engage CISA and Treasury once the clearinghouse and directive processes are operational, since access to AI-enabled defensive tools and covered frontier models is expected to flow through that channel. Security and legal teams at frontier model developers should track the classified benchmarking process and weigh participation in the voluntary 30-day pre-release review, given that non-participation could carry reputational or contracting consequences even without a formal mandate. Compliance teams should also monitor forthcoming CISA Binding Operational Directives for AI-specific requirements distinct from general vulnerability-management obligations.