Center for Internet Security launches AI cyber defense pilot for state and local governments

The Center for Internet Security is partnering with OpenAI on a pilot program to test how artificial intelligence can help state and local governments strengthen their cybersecurity defenses. 

The AI Cyber Defense Pilot, announced Friday, will bring together state, local, tribal and territorial governments and critical infrastructure organizations, like the Multi-State Information Sharing and Analysis Center, to examine how AI tools can be applied to real-world cybersecurity challenges. Participants will use OpenAI technology to identify and validate security vulnerabilities, prioritize risk mitigation, support remediation and improve cyber hygiene.

The pilot comes as public-sector cybersecurity teams face increasingly sophisticated threats, often while operating with limited staff and resources. 

“The services Americans rely on every day are increasingly in the crosshairs of cyber threats. At a time when defenders at the state and local government level are challenged by a growing threat landscape, AI has the potential to be a game changer,” Brian Calkin, chief technology and innovation officer at CIS, said in a statement. “This pilot will help us understand how AI can help organizations make smarter decisions, respond faster, and focus on the risks that matter most. The lessons we learn can help strengthen cyber resilience for communities across the country.”

The initiative also comes as state and local governments take on greater responsibility for their cyber defenses following reductions in federal support for MS-ISAC. The Cybersecurity and Infrastructure Security Agency ended its cooperative agreement with CIS last year, shifting to a model centered on grants, free tools and direct cybersecurity assistance. 

A spokesperson for the Center for Internet Security noted last year that MS-ISAC has long played an integral role in the defense of the nation’s homeland security infrastructure by providing services not provided by the federal government and that funding cuts could represent opportunities for the nation’s adversaries.

“While we respect DHS’ budgetary authority, we are concerned that recent cuts in funding for the Multi-State Information Sharing and Analysis Center will make state and local governments vulnerable to persistent cybersecurity attacks from foreign adversaries,” the spokesperson wrote. “These jurisdictions are on the front lines of supporting much of the nation’s critical infrastructure, and they rely on the MS-ISAC for vital resources to monitor and avert cyber threats that arise daily.”

Local governments face particular challenges with cybersecurity staffing and funding, with 80% of respondents to a 2024 survey reporting fewer than five dedicated security employees. In addition, researchers found that state agencies performed better on cybersecurity practices — 46% of state governments met a maturity benchmark compared to 35% of local governments, a disparity they attributed in part to the greater technology funding typically enjoyed by state governments.

“A local government such as a city office or county office may have one dedicated information technology or security employee who is managing a lot of day-to-day tasks and projects,” Tyler Scarlotta, member programs manager at CIS, told StateScoop. “That employee likely does not have a lot of time to dedicate towards formalizing security practices.”

The security nonprofit’s new pilot could offer a test of whether AI can help smaller governments stretch limited cybersecurity resources, especially as cyber officials increasingly see the technology as a tool for processing large volumes of security data and helping human analysts contextualize potential threats.