Week of 22 December 2025
MLCommons AI Safety Benchmark v0.5 defines 13 hazard categories for evaluating chat-based AI system safety.
Key points
- Practical testing tools including ModelBench are openly available, making this usable for agency-level AI evaluation.
- V0.5 has been superseded by V1.0 (AILuminate, Feb 2025); this spotlight is retrospective context, not a new release.
MIT AI Risk Repository spotlights a 2023 paper categorising catastrophic AI risks into four proximate causes.
Key points
- The four categories — malicious use, AI race, organisational risks, and rogue AI — each include mitigations.
- This is a secondary blog summary of a 2023 paper; primary value is as a reference for risk taxonomy work.
NIST invests $20 million with MITRE to establish two AI centres focused on manufacturing productivity and critical infrastructure cybersecurity.
Key points
- Centres extend NIST's CAISI work on AI evaluation and build toward a separate $70 million AI for Resilient Manufacturing Institute.
- US-centric industrial AI strategy; limited direct Australian regulatory parallel, though signals priority areas for allied nations.
Week of 15 December 2025
NIST has released a preliminary draft Cyber AI Profile (NISTIR 8596) for 45-day public comment, closing 30 January 2026.
Key points
- The profile maps cybersecurity guidance across three areas: securing AI systems, AI-enabled defence, and AI-enabled attack resilience.
- Still in preliminary draft stage; a refined initial public draft is planned for 2026, limiting immediate applicability for Australian agencies.
NIST has released a preliminary draft Cybersecurity Framework Profile for AI (NIST IR 8596) open for public comment until 30 January 2026.
Key points
- The profile addresses three focus areas: securing AI system components, AI-enabled cyber defence, and thwarting AI-enabled attacks.
- A companion workshop is scheduled for 14 January 2026; this is a US standard with no immediate Australian compliance obligation.
A 2022 academic framework organises AI/ML risks into data-level and model-level categories with root causes and outcomes.
Key points
- The framework targets high-stakes decision settings like healthcare and transport - domains relevant to APS service delivery.
- This is a 2022 paper spotlighted by MIT's AI Risk Repository blog; it is not new primary research or Australian guidance.
NIST CAISI is hiring an AI Research Scientist focused on evaluation methods and trustworthy AI measurement.
Key points
- The role signals continued US investment in rigorous AI evaluation infrastructure relevant to international standards work.
- Job postings carry low signal for APS readers; included for context on CAISI's capability build-out only.
NIST has released SSDF Version 1.2 for public comment, covering secure software development practices.
Key points
- The framework addresses software vulnerability mitigation across development lifecycle models - not specific to AI.
- Limited direct relevance to APS AI governance work; this is a general secure software development standard.
NIST has finalised cybersecurity guidelines for smart speaker use in home telehealth and hospital-at-home programs.
Key points
- Guidelines draw on NIST CSF 2.0, Privacy Framework, and IoT baseline standards - not AI governance frameworks specifically.
- Limited direct relevance to APS AI governance work; this is primarily a health-sector IoT/cybersecurity item.
NIST NCCoE has finalised a cybersecurity white paper on telehealth smart home integration risks.
Key points
- The paper focuses on Hospital-at-Home IoT device risks, not AI governance or algorithmic systems.
- Limited direct relevance to APS AI practitioners - this is a cybersecurity and privacy item, not an AI item.
Week of 1 December 2025
MIT AI Risk Repository Version 4 now includes over 1,700 coded risks drawn from 74 published frameworks.
Key points
- Nine newly added frameworks span government reports, peer-reviewed papers, and industry sources, including a UK DSIT frontier AI paper.
- A structured, living reference for AI risk taxonomy - useful for APS governance and risk assessment work.
Week of 20 October 2025
NAIC's updated Guidance for AI Adoption consolidates the Voluntary AI Safety Standard into 6 streamlined key practices.
Key points
- Guidance offers two tiers - Foundations for new adopters and Implementation Practices for scaling organisations - with templates included.
- Primarily targets Australian businesses, not government agencies directly, though principles align with APS AI governance frameworks.
Week of 13 October 2025
MIT AI Risk Repository used LLMs to classify 950+ AI governance documents across risk, mitigation, and sector taxonomies.
Key points
- Governance failure, security vulnerabilities, and transparency were the most-covered risk domains; AI welfare and multi-agent risks were least covered.
- US-heavy dataset limits global generalisability; Australian documents are unlikely to be well-represented in current outputs.
Week of 15 September 2025
NIST is hosting a workshop on Privacy-Enhancing Cryptography implementations in September 2025.
Key points
- The event is part of a NIST series on privacy and public auditability - not focused on AI systems.
- Limited direct relevance to Australian federal AI governance; this is a cryptography standards event.
Week of 1 September 2025
NIST-commissioned study estimates federal IoT infrastructure investment yields a 10-20x return on investment.
Key points
- AI is noted as both a driver and beneficiary of IoT infrastructure, reinforcing the two technologies' interdependence.
- US-focused economic analysis with limited direct relevance to Australian federal AI governance or procurement decisions.
Week of 25 August 2025
MIT AI Risk Repository publishes a transparent, publicly accessible deck of 13 AI risk mitigation frameworks.
Key points
- The resource consolidates academic, industry, and policy sources into a draft AI Risk Mitigation Taxonomy for governance use.
- Useful reference for APS teams building or auditing internal AI risk frameworks, though not Australia-specific.
NIST has finalised SP 800-53 Rev. 5.2.0, adding three new security controls focused on software patching and resilience.
Key points
- The update targets software update management risk - not AI governance - limiting direct APS AI relevance.
- Limited direct relevance to Australian federal AI governance work; primarily a cybersecurity controls item.
Week of 18 August 2025
NIST awarded $1.8 million across 18 small businesses under its SBIR program for Phase I R&D projects.
Key points
- Two of the 18 awards are AI-focused: an adversarial prompt defence algorithm and an AI safety/explainability framework.
- Limited direct relevance to APS readers; included as context on US government AI R&D funding patterns.
Week of 4 August 2025
NIST and CAISI have developed two draft taxonomies for AI agent tool use, covering functionality and constrained access patterns.
Key points
- The taxonomies aim to create shared vocabulary across the AI supply chain - useful for procurement, risk assessment, and incident reporting.
- Australia has no equivalent published taxonomy for AI agent tools; NIST's work may inform future Australian guidance or procurement frameworks.
Week of 28 July 2025
MIT AI Risk Repository extracted 831 mitigations from 13 frameworks into a searchable database with a four-category taxonomy.
Key points
- The taxonomy covers Governance & Oversight, Technical & Security, Operational Process, and Transparency & Accountability controls - directly mapping to APS AI governance concerns.
- Operational Process Controls and Testing & Auditing were the most frequently cited mitigations; Model Alignment was rarely mentioned despite its importance.
Week of 14 July 2025
MIT AI Risk Repository's incident tracker has been updated to include all AIID incidents through 23 June 2025 (up to ID #1116).
Key points
- New features include national security impact assessment across five categories, harm severity rescaling, and Fishbone causal diagrams.
- Useful as a reference dataset for APS agencies developing AI risk registers or incident classification frameworks.
A 2022 academic framework proposes six AI risk categories specifically designed for public sector governance contexts.
Key points
- The taxonomy links technological, ethical, legal, social, economic, and informational risks to concrete governance guidelines.
- MIT AI Risk Repository blog spotlight - the underlying paper is three years old and the signal is retrospective rather than new.
MIT AI Risk Repository spotlights a 2020 academic framework organising AI governance challenges for public administration into three categories.
Key points
- The framework's five-layer governance structure and four-stage regulatory process offer a reference model for agency AI risk management.
- The underlying paper is five years old; APS practitioners likely have more current frameworks already in use.
Week of 16 June 2025
Alan Turing Institute researchers reflect on their role in the UK's Global AI Assurance Pilot.
Key points
- The pilot is directly relevant to Australian assurance frameworks - AISI and DTA are developing comparable approaches.
- Extracted text is minimal; full substance requires reading the source blog post directly.
Week of 12 May 2025
MIT AI Risk Repository spotlights a 2022 Google DeepMind taxonomy of LLM risks across six domains and 20 subdomains.
Key points
- The taxonomy covers discrimination, information hazards, misinformation, malicious use, HCI harms, and socioeconomic harms - directly relevant to APS AI risk assessment work.
- The underlying paper is from 2022; the MIT blog post is a summary spotlight, not new research.