CIS, OpenAI launch AI cyber defense pilot for state and local governments

The Center for Internet Security and OpenAI are teaming up on a pilot to test how artificial intelligence can help state, local, tribal and territorial governments spot risks faster, prioritize defenses and improve resilience. The program is aimed at protecting critical infrastructure and producing guidance for broader public-sector adoption.

Why it matters: - State and local governments face rising cyber threats while defending complex systems with limited staff and budgets. - The pilot is meant to test whether AI can help public-sector defenders respond faster and reduce risk across critical infrastructure. - The effort could shape how AI tools are adopted more broadly across government cybersecurity programs.

What happened: - The Center for Internet Security and OpenAI announced an AI Cyber Defense Pilot on Sept. 4, 2026. - The program is designed to help U.S. State, Local, Tribal and Territorial governments and critical infrastructure organizations use AI to strengthen cybersecurity and resilience. - The pilot will include government and critical infrastructure organizations of different sizes, regions and cybersecurity maturity levels. - The initiative will also include members of the MS-ISAC community.

The details: - The pilot will examine how AI can help organizations detect risks faster, prioritize security actions, strengthen cyber hygiene and improve cyber readiness. - Participating organizations will use OpenAI technology to identify, validate and prioritize findings. - The pilot will also support remediation efforts and promote cybersecurity best practices aligned with the CIS Critical Security Controls® and essential cyber hygiene criteria. - CIS said the effort will be informed by the operational experience and cybersecurity expertise of the MS-ISAC community, which helps SLTT governments prevent, detect, respond to and recover from cyber incidents. - OpenAI said the partnership is intended to help defenders, including smaller and under-resourced teams, use AI for stronger defenses. - The initiative will produce implementation guidance, lessons learned and recommendations for future adoption of AI-powered cybersecurity capabilities. - CIS said the organization already provides AI security resources, research and best practices focused on secure AI adoption, governance and emerging threats. - Additional resources are available at security artificial intelligence resources.

Between the lines: - The pilot is a practical test of whether frontier AI can be translated into day-to-day defensive work for public agencies. - The focus on smaller and under-resourced teams suggests the program is meant to address a persistent gap in public-sector cybersecurity capacity. - The inclusion of MS-ISAC expertise signals that the project is being shaped by operational needs, not just technology capabilities.

What's next: - CIS and OpenAI will gather lessons from the pilot and use them to inform future public-sector and critical infrastructure deployments. - The partners are expected to identify scalable approaches that help defenders reduce risk and protect essential services. - CIS will continue building out guidance on responsible AI adoption as government and infrastructure operators expand AI use.

The bottom line: - CIS and OpenAI are betting AI can give public-sector defenders a faster, more scalable way to spot and fix cyber weaknesses before attackers do.