US government and industry expand AI and critical-infrastructure cyber information sharing efforts

US cybersecurity officials said work is underway to stand up new and expanded government–industry mechanisms for sharing threat intelligence, with a particular focus on AI security and operational technology (OT) risks to critical infrastructure. CISA executive assistant director Nick Andersen said an AI Information-Sharing and Analysis Center (AI-ISAC) ordered by the White House is still in an “ongoing policy dialogue” phase, with stakeholders trying to resource the effort and avoid duplicating existing private-sector information-sharing initiatives; he also said there is no launch timeline and described the effort as moving through a “pre-decisional” process. In parallel, Andersen said DHS/CISA is planning a replacement for the disbanded Critical Infrastructure Partnership Advisory Council (CIPAC), aiming to correct gaps in the prior structure—particularly the lack of an explicit cybersecurity charter—and to enable more targeted focus groups on issues such as undersea cables and OT systems.

Separately, the White House Office of the National Cyber Director said it is developing an AI security policy framework intended to embed security controls into AI “tech stacks” in coordination with the Office of Science and Technology Policy, citing risks such as data poisoning and the potential for agentic capabilities to accelerate intrusions. In the private sector, the Manufacturing ISAC (MFG-ISAC) reported increased collaboration to address rising threats to manufacturing, including OT-focused initiatives such as tabletop exercises, OT training, and development of incident response playbooks and OT threat guidelines, alongside preparation for updated CMMC requirements—reinforcing the broader push toward structured, sector-based information sharing and readiness for critical-infrastructure cyber threats.