DOD CIO solicits industry to inform revamp of ‘cumbersome’ cybersecurity risk framework; Congress seeks ban on government use of foreign adversary AI

The Defense Department’s Office of the Chief Information Officer has officially kicked off its effort to improve how the Pentagon manages cybersecurity risks with advanced automation and continuous monitoring capabilities. The DOD CIO published a request for information Wednesday on Sam.gov calling for industry’s input on emerging technologies, solutions and business practices that can support the department’s attempt to revamp the Risk Management Framework (RMF). The initiative largely seeks to replace the legacy framework with a multi-phased construct that will be demanding for cyber and acquisition professionals. Officials are hoping to speed up capability delivery to warfighters. The RFI states: “Although RMF enhances security through continuous monitoring and risk-based decision-making, it’s often seen as slow and cumbersome. To meet the urgent demands of modern cyber threats and accelerate innovation, the DoD is working to streamline the RMF process — aiming for greater efficiency without compromising on security.” Federal agencies would be barred from using artificial intelligence linked to the Chinese government under legislation introduced Wednesday by a bipartisan group of House and Senate lawmakers. The No Adversarial Al Act proposal from Reps. John Moolenaar, R-Mich., and Raja Krishnamoorthi, D-Ill., the chair and ranking member of the House Select Committee on China, respectively, is a companion to legislation from Sens. Rick Scott, R-Fla., and Gary Peters, D-Mich. The bill is the latest in a series of other congressional proposals focused on DeepSeek, a Chinese startup whose low-cost AI model has stirred panic in U.S. tech and AI companies. The Daily Scoop Podcast is available every Monday-Friday afternoon. If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.