AI Security Task Force
As AI reshapes government operations, GovRAMP is leading a cross-sector initiative to define how AI can be adopted securely, responsibly, and in alignment with trusted NIST standards.
Our Mission
As generative AI becomes embedded in cloud services across government, the need for consistent, risk-based security guidance is clear. That’s why GovRAMP launched the AI Security Task Force — a collaborative body of public- and private-sector members dedicated to promoting responsible and trustworthy AI innovation.
Rather than creating new frameworks, the Task Force builds upon established NIST standards, including NIST 800-53 Rev. 5 and the NIST AI Risk Management Framework, to identify gaps, manage emerging risks, and share actionable recommendations. Through this shared effort, GovRAMP is helping governments adopt AI-enabled cloud solutions confidently, ensuring innovation and cybersecurity advance together.
AI Executive Council
Guided by public-sector leaders, the AI Executive Council includes state CIOs and CISOs who provide strategic direction for AI security standards in government cloud adoption. Their insight ensures GovRAMP’s AI recommendations reflect real-world needs and practical implementation across all levels of government.
Ryan Murray
CISO
State of Arizona
Dr. Craig Orgeron
Executive Director & State Chief Information Officer
Mississippi Department of Information Technology Services
GovRAMP Board President
Tony Sauerhoff
Chief AI & Innovation Officer and Interim State CIO & Executive Director
Texas Department of Information Resources (DIR)
Jason Snyder
Secretary of the Executive Office of Technology Services and Security and Commonwealth CIO
Commonwealth of Massachusetts
Shawnzia Thomas
CIO Georgia / Executive Director of GTA
State of Georgia
AI Security Task Force Members
The AI Security Task Force brings together GovRAMP member organizations across the public and private sectors — uniting experts who share a commitment to secure, transparent, and trustworthy AI innovation.
Through working groups and discussions, members help identify risks, surface insights, and develop actionable recommendations that strengthen public trust in AI-enabled technology.
-
Razaq Ahmed, Deputy Chief Information Security Officer, Smartronix
-
Dan Aiken, Staff Information Security Program Manager, Rubrik
-
James Armstrong, VP Development, Actsoft
-
Dennis Bachman, Director of IT and Cybersecurity, Kansas Racing and Gaming Commission
-
Laura Baga, Senior Strategic Account Executive, Impact and Public Sector Accounts, Twilio
-
Tony Bai, Chief Solutions Officer, RISCPoint
-
Susan Baker, IT/Data Director, Cross-Sell, LLC
-
Jim Beckner III, FedRAMP Program Manager, Trimble
-
Gayle Berkeley, Director, Information Security, Rubrik
-
Joe Bielawski, GovRAMP Past President & Co-Founder
-
Erica Bradshaw, Deputy Secretary, Massachusetts
-
Richard Brown, Principal Product Manager, Genesys Cloud Services, Inc.
-
Noah Brown, Chief Information Security Officer, Knowledge Services
-
Jeff Burklo, VP, CISO, Savvas Learning Company, LLC
-
Nikki Bushong, State of Michigan
-
Ashlee Carter, Information Security Analyst III, GovRAMP PMO
-
Errika Celsey, Chief Privacy & Compliance Officer, Arizona
-
Fabio Cerullo, Director of Security, Kitman Labs
-
Siddique Chaudhry, Sr. Manager, Global Public Sector Compliance, Snowflake
-
Molly Cohen, Director of Partnerships, Recidiviz
-
Jorge Conde-Berrocal, CEO / Founder, V3 Cybersecurity, Inc.
-
Ted Cotterill, Associate Director & Security Account Lead, Accenture
-
Brian DaSilva, Sr. Director, GRC, Mark43
-
Glen Deskin, Head of Engineering, Office of the CTO, Check Point Software Technologies
-
Johann Dettweiler, CISO and Compliance SME, StackArmor
-
Amrit Dhir, Director of Partnerships, Recidiviz
-
Stephanie Donofrio, Director of Public Sector Channels, Orca Security
-
Justin Donohoe, President, JJD Software
-
Drenan Dudley, Head of State, Local, Tribal, and Territorial Government Partnerships, Senior Advisor for Global Cyber Policy, Zscaler
-
Saeed Elahi, Director Information Security, Tenable
-
Lorenzo Estrella, Technology Specialist II, Payson Unified School District
-
Pete Fagan, Director, CJIS Compliance Program, Motorola Solutions
-
Lauren Farese, Group Vice President - SLED | Solution Engineering, Oracle
-
Kathy Fraser, CIO, State of Minnesota
-
James Globe, Vice President, Strategic Advisor Cybersecurity Capabilities, Center for Internet Security
-
Kevin Greene, Chief Cybersecurity Technologist – Public Sector, BeyondTrust
-
Gary Guercio, Vice President, Service Delivery, Fortreum
-
Pat Guest, Director of PTC, NICTD
-
Dustin Hartigan, State Administrative Manager, State of Michigan - Department of Technology, Management & Budget
-
Shelley Hawkins, Executive Assistant, Texas Department of Information Resources
-
Peter Henggeler, Information Security Officer, Recidiviz
-
Glenn Herdrich, GovRAMP Board Member
-
Collin Hill, CIO, City of Indianapolis and Marion County
-
Jennie Hoelscher, Chief Privacy Officer, Texas
-
Payam Hojjat, Cyber Risk & Governance Chief, State of California
-
Kristine Holt, Director of Technology and Innovation, Utah Department of Corrections
-
Ernie Hudson, Senior Director, Product & Technology, Counter Tools
- Sheneika Hurley, Senior Solutions Architect, Everlaw
- Miguel Jimenez, Network Operations Analyst, Brightstar Lottery
- Eddie Kim, Head of AI Value Strategy, Everlaw
- Colby King, Information Security Officer, Fivos, Inc.
-
Ean Krenzin-Blank, Vice President of Software, SOS Technologies
-
Linda Markey, Director, Security Policy and Planning, Texas Department of Information Resources
-
Rod Massey, Sr. Director, Secure Cloud Sales, SAP NS2
-
Chris Mayhew, CISO, Authorium, Inc.
-
Donnie McCleskey, Director of Sales, Public Sector, Twilio
-
Felipe Medina, CISO, Geographic Solutions
-
Jodie Monette, CJIS Information Security Officer, Security Architect, State of Minnesota - MN Bureau of Criminal Apprehension
-
Ken Morris, Advisor, RAMPxchange
-
Rashad Munawar, Director, Security Compliance & Operations, BlackBerry
-
Brian O'Connor, Director - Global Security & Compliance Office, Extreme Networks
-
Olutosin Oguntunde, Managing Director, Accenture
-
Jason Oksenhendler, Director, Baker Tilly
-
Anthony O'Neill, Commonwealth CISO & Chief Risk Officer, Massachusetts
-
Derly Ortiz, Senior Executive Assistant, Commonwealth of Massachusetts - Executive Office of Technology Services and Security
-
Robert Otten, Director Risk and Compliance, Flock Safety
-
Gaurav Pal, Principal, StackArmor
-
Roy Park, Cybersecurity Architect, San Joaquin County Office of Education
-
Andy Perkins, CTO, Jadu
-
Nick Peters, Security Program Manager - FedRAMP Change Control, Rubrik
-
Robert Peterson, IT Director, Washington County Idaho
-
Dugan Petty, GovRAMP Board Member, GovRAMP Board
-
Jennifer Pittman-Leeper, Field CISO, GovRAMP
-
Nicolas Ponce, VP, Operations & Security, Addigy
-
Ashwin Rao, Director, Infrastructure and Security, Find Help
-
Ava Rassouli, IT Manager, Marin County
-
David Resler, Senior Director, GovRAMP PMO
-
Rita Reynolds, Director of Public Sector, Computer Aid, Inc. (CAI)
-
Jon Ridpath, Sr. Security Engineer, Aztec Software
-
Cheri Rolfes, Chief of Staff, Massachusetts Executive Office of Technology Services and Security
-
Andrew Rudder, Sr. Enterprise Risk Management Analyst, Massachusetts
-
John Santore, Director, Cyber Acceleration, Constellation GovCloud
-
Mary Schafer, Senior FedRAMP Program Manager, Abnormal AI, Inc.
-
Calli Schlientz, Director of Compliance, DataBank, Ltd.
-
Wil Seiler, Technical Service Manager, 360Advanced
-
JR Sloan, GovRAMP Past President & Co-Founder
-
Tammy Spangler, Director, Information Security Assurance, NCSBN
-
Jared Spurgeon, Chief Privacy Officer, Arizona Department of Economic Security
-
Patrick Sullivan, VP, Xacta Solutions and Services, Telos Corp.
-
Marvell Summerow, Security Program Manager, MapLarge
-
Said Syed, CISO, Snyk, Inc.
-
Bryan Tobek, Senior Consultant, GovRAMP PMO
-
Vladimir Trushkin, CTO, ChemWatch
-
Thomas Twigg, Data Privacy Specialist, Michigan State Police
-
Joel Varty, CTO, Agility
-
Amy Ventura, Government Engagement Director, GovRAMP
-
Justine Verigin, Compliance Attorney, Matrix Pointe Software
-
Thomas Volpe Jr., Vice President, Cybersecurity Risk and Compliance, C2 Labs
-
Nathan Willigar, State & Local Government and Education - Chief Security Advisor, Microsoft
-
Christopher Wright, Security Assurance, Fortreum
GovRAMP Staff Contacts
For questions about participation or updates on AI Task Force initiatives, reach out to our team.
Leah McGrath
Executive Director
GovRAMP
Fred Brittain
Executive Advisor
GovRAMP PMO
Aysha Davis
Program Analyst
GovRAMP PMO
Chandler McGuire
Marketing Specialist
GovRAMP
Track the Task Force’s Progress
The AI Security Task Force is advancing through structured phases to ensure every recommendation is informed, reviewed, and aligned with the needs of the GovRAMP community.
2026
Q1 2026
Foundation & Implementation
Finalize and roll out the AI Self Reporting Addendum, implement generative AI as a Significant Change Notification, introduce AI notation on the Authorized and Progressing Product Lists, and begin alignment with NIST AI RMF updates and overlays to NIST 800-53.
Q2 2026
Guidance Development & Rollout
Draft shared responsibility and procurement guidance for AI-enabled products, continue analysis of AI overlays, and complete rollout of the AI Addendum and APL/PPL notation to members.
Q2 2026
Q3 2026
Overlay Advancement & Committee Engagement
Refine AI overlays and trustworthiness guidance in coordination with GovRAMP committees, aligned with evolving NIST guidance.
Q4 2026
Continued Engagement & Planning
Continue Executive Council and Task Force meetings, advance overlay development, and prepare for broader member engagement and education.
Q4 2026
2027
Follow our progress as findings evolve into published AI guidance available in the GovRAMP Documents.
Stay Connected with GovRAMP
GovRAMP’s AI Security Task Force continues to advance best practices for trustworthy AI in government cloud adoption. Subscribe to receive updates, new guidance, and opportunities to contribute.