{"id":7365,"date":"2025-10-20T14:38:29","date_gmt":"2025-10-20T21:38:29","guid":{"rendered":"https:\/\/objectsecurity.com\/?p=7365"},"modified":"2025-10-20T14:38:29","modified_gmt":"2025-10-20T21:38:29","slug":"airea2025","status":"publish","type":"post","link":"https:\/\/objectsecurity.com\/airea2025\/","title":{"rendered":"Preparing for AI Risk Evaluation: What the New Federal Framework Means for Assurance"},"content":{"rendered":"

The Artificial Intelligence Risk Evaluation Act of 2025 proposes a federal framework requiring developers of certain advanced AI systems to undergo formal evaluation before deployment. The Act would establish an Advanced Artificial Intelligence Evaluation Program within the Department of Energy to create standardized testing and review procedures for high-compute AI models.<\/p>\n

It also prohibits deployment of covered AI systems unless the developer complies with the program\u2019s obligations. Violations carry civil penalties of at least $1,000,000 per day.<\/p>\n

What It Is<\/strong><\/p>\n

If enacted, the program would provide standardized (and in some cases classified) testing, adversarial red-team evaluations, and formal reports on risks, including scenarios like loss-of-control, weaponization by adversaries, impacts on critical infrastructure, and scheming behavior. The DOE may also facilitate independent third-party assessments and blind model evaluations \u201cto maintain transparency and reliability.\u201d The bill applies to AI systems trained using more than 1026<\/sup> integer or floating-point operations, though the Secretary of Energy could propose a new definition if approved by Congress.<\/p>\n<\/div><\/div><\/div>

Why It Matters <\/strong><\/p>\n

To date, most U.S. AI governance has leaned on voluntary frameworks like NIST\u2019s AI RMF or industry initiatives. This proposal would move key oversight responsibilities into the legal and regulatory domain, requiring tangible proof of safety and accountability for frontier-scale AI systems. For organizations developing or integrating AI, this signals a shift: demonstrated safety performance will soon be as essential as functional performance.<\/p>\n

Risk Meets Verification<\/strong><\/p>\n

The proposed Act prioritizes evidence-based assurance, requiring testing protocols that match or surpass real-world \u201cjailbreaking\u201d and adversarial techniques. It mandates red-team evaluations modeled on the methods used by malicious actors. It also envisions independent assessments, incident reporting, and structured documentation to support continuous oversight and accountability.<\/p>\n<\/div><\/div><\/div>

<\/span><\/div>
<\/span><\/div><\/div><\/div>

Turning Oversight Into Assurance with FortiLayer<\/strong><\/p>\n

The AI Risk Evaluation Act emphasizes formal testing, documentation, and accountability for advanced AI systems. ObjectSecurity\u2019s FortiLayer helps organizations prepare for these requirements by providing practical tools for model evaluation and assurance. The platform analyzes AI models layer by layer to identify security vulnerabilities, inefficiencies, and performance issues.<\/p>\n

It automates testing for adversarial robustness, tracks key performance and safety metrics, and integrates into existing development pipelines. By combining automated testing, compliance mapping, and continuous monitoring, FortiLayer enables organizations to demonstrate the reliability and accountability of their AI systems through clear, evidence-based results.<\/p>\n

Preparing for the Next Phase of AI Regulation<\/strong><\/p>\n

Federal oversight of AI is still evolving, but the direction is becoming clear. Organizations that operate or develop advanced models will soon need to produce evidence of safety, reliability, and compliance before deployment. Preparing now reduces uncertainty and costs later. This means establishing processes for continuous evaluation, maintaining documentation that supports regulatory reporting, and building a culture of transparency and accountability across the AI lifecycle.<\/p>\n

FortiLayer supports this transition by making assurance part of everyday model management rather than a one-time audit. As future policies refine definitions and thresholds for advanced AI, organizations already practicing structured evaluation will be positioned to adapt quickly and meet new standards with confidence.<\/p>\n<\/div><\/div><\/div>

FORTILAYER<\/span><\/a><\/div><\/div><\/div>
AI Risk Evaluation Act of 2025<\/span><\/a><\/div><\/div><\/div>
Contact Us<\/span><\/a><\/div><\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":7,"featured_media":7369,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[60,66,93,62,87],"tags":[],"class_list":["post-7365","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-artificial-intelligence","category-data-security","category-dod-gov","category-machine-learning","category-tech"],"yoast_head":"\nPreparing for AI Risk Evaluation: What the New Federal Framework Means for Assurance - ObjectSecurity<\/title>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/objectsecurity.com\\\/airea2025\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/objectsecurity.com\\\/airea2025\\\/\"},\"author\":{\"name\":\"Dan Mathews\",\"@id\":\"https:\\\/\\\/objectsecurity.com\\\/#\\\/schema\\\/person\\\/14b868388b1a079ff39642a078cea62d\"},\"headline\":\"Preparing for AI Risk Evaluation: What the New Federal Framework Means for Assurance\",\"datePublished\":\"2025-10-20T21:38:29+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/objectsecurity.com\\\/airea2025\\\/\"},\"wordCount\":5530,\"image\":{\"@id\":\"https:\\\/\\\/objectsecurity.com\\\/airea2025\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/objectsecurity.com\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/AIrea2025FI.png?fit=600%2C337&ssl=1\",\"articleSection\":[\"Artificial Intelligence\",\"Data Security\",\"DoD\\\/gov\",\"Machine Learning\",\"Technical\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/objectsecurity.com\\\/airea2025\\\/\",\"url\":\"https:\\\/\\\/objectsecurity.com\\\/airea2025\\\/\",\"name\":\"Preparing for AI Risk Evaluation: What the New Federal Framework Means for Assurance - ObjectSecurity\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/objectsecurity.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/objectsecurity.com\\\/airea2025\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/objectsecurity.com\\\/airea2025\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/objectsecurity.com\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/AIrea2025FI.png?fit=600%2C337&ssl=1\",\"datePublished\":\"2025-10-20T21:38:29+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/objectsecurity.com\\\/#\\\/schema\\\/person\\\/14b868388b1a079ff39642a078cea62d\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/objectsecurity.com\\\/airea2025\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/objectsecurity.com\\\/airea2025\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/objectsecurity.com\\\/airea2025\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/objectsecurity.com\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/AIrea2025FI.png?fit=600%2C337&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/objectsecurity.com\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/AIrea2025FI.png?fit=600%2C337&ssl=1\",\"width\":600,\"height\":337},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/objectsecurity.com\\\/airea2025\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/objectsecurity.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Preparing for AI Risk Evaluation: What the New Federal Framework Means for Assurance\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/objectsecurity.com\\\/#website\",\"url\":\"https:\\\/\\\/objectsecurity.com\\\/\",\"name\":\"ObjectSecurity\",\"description\":\"OT\\\/ICS Asset Binary Vulnerability Analysis and Reporting\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/objectsecurity.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/objectsecurity.com\\\/#\\\/schema\\\/person\\\/14b868388b1a079ff39642a078cea62d\",\"name\":\"Dan Mathews\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b06577e2636149f9ca4ada40c7d935744591ec4ec49be5865e3f0180e5d38b15?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b06577e2636149f9ca4ada40c7d935744591ec4ec49be5865e3f0180e5d38b15?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b06577e2636149f9ca4ada40c7d935744591ec4ec49be5865e3f0180e5d38b15?s=96&d=mm&r=g\",\"caption\":\"Dan Mathews\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Preparing for AI Risk Evaluation: What the New Federal Framework Means for Assurance - ObjectSecurity","robots":{"index":"noindex","follow":"follow"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/objectsecurity.com\/airea2025\/#article","isPartOf":{"@id":"https:\/\/objectsecurity.com\/airea2025\/"},"author":{"name":"Dan Mathews","@id":"https:\/\/objectsecurity.com\/#\/schema\/person\/14b868388b1a079ff39642a078cea62d"},"headline":"Preparing for AI Risk Evaluation: What the New Federal Framework Means for Assurance","datePublished":"2025-10-20T21:38:29+00:00","mainEntityOfPage":{"@id":"https:\/\/objectsecurity.com\/airea2025\/"},"wordCount":5530,"image":{"@id":"https:\/\/objectsecurity.com\/airea2025\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/objectsecurity.com\/wp-content\/uploads\/2025\/10\/AIrea2025FI.png?fit=600%2C337&ssl=1","articleSection":["Artificial Intelligence","Data Security","DoD\/gov","Machine Learning","Technical"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/objectsecurity.com\/airea2025\/","url":"https:\/\/objectsecurity.com\/airea2025\/","name":"Preparing for AI Risk Evaluation: What the New Federal Framework Means for Assurance - ObjectSecurity","isPartOf":{"@id":"https:\/\/objectsecurity.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/objectsecurity.com\/airea2025\/#primaryimage"},"image":{"@id":"https:\/\/objectsecurity.com\/airea2025\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/objectsecurity.com\/wp-content\/uploads\/2025\/10\/AIrea2025FI.png?fit=600%2C337&ssl=1","datePublished":"2025-10-20T21:38:29+00:00","author":{"@id":"https:\/\/objectsecurity.com\/#\/schema\/person\/14b868388b1a079ff39642a078cea62d"},"breadcrumb":{"@id":"https:\/\/objectsecurity.com\/airea2025\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/objectsecurity.com\/airea2025\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/objectsecurity.com\/airea2025\/#primaryimage","url":"https:\/\/i0.wp.com\/objectsecurity.com\/wp-content\/uploads\/2025\/10\/AIrea2025FI.png?fit=600%2C337&ssl=1","contentUrl":"https:\/\/i0.wp.com\/objectsecurity.com\/wp-content\/uploads\/2025\/10\/AIrea2025FI.png?fit=600%2C337&ssl=1","width":600,"height":337},{"@type":"BreadcrumbList","@id":"https:\/\/objectsecurity.com\/airea2025\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/objectsecurity.com\/"},{"@type":"ListItem","position":2,"name":"Preparing for AI Risk Evaluation: What the New Federal Framework Means for Assurance"}]},{"@type":"WebSite","@id":"https:\/\/objectsecurity.com\/#website","url":"https:\/\/objectsecurity.com\/","name":"ObjectSecurity","description":"OT\/ICS Asset Binary Vulnerability Analysis and Reporting","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/objectsecurity.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/objectsecurity.com\/#\/schema\/person\/14b868388b1a079ff39642a078cea62d","name":"Dan Mathews","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/b06577e2636149f9ca4ada40c7d935744591ec4ec49be5865e3f0180e5d38b15?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/b06577e2636149f9ca4ada40c7d935744591ec4ec49be5865e3f0180e5d38b15?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b06577e2636149f9ca4ada40c7d935744591ec4ec49be5865e3f0180e5d38b15?s=96&d=mm&r=g","caption":"Dan Mathews"}}]}},"jetpack_featured_media_url":"https:\/\/i0.wp.com\/objectsecurity.com\/wp-content\/uploads\/2025\/10\/AIrea2025FI.png?fit=600%2C337&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/objectsecurity.com\/wp-json\/wp\/v2\/posts\/7365","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/objectsecurity.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/objectsecurity.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/objectsecurity.com\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/objectsecurity.com\/wp-json\/wp\/v2\/comments?post=7365"}],"version-history":[{"count":2,"href":"https:\/\/objectsecurity.com\/wp-json\/wp\/v2\/posts\/7365\/revisions"}],"predecessor-version":[{"id":7368,"href":"https:\/\/objectsecurity.com\/wp-json\/wp\/v2\/posts\/7365\/revisions\/7368"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/objectsecurity.com\/wp-json\/wp\/v2\/media\/7369"}],"wp:attachment":[{"href":"https:\/\/objectsecurity.com\/wp-json\/wp\/v2\/media?parent=7365"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/objectsecurity.com\/wp-json\/wp\/v2\/categories?post=7365"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/objectsecurity.com\/wp-json\/wp\/v2\/tags?post=7365"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}