AI Security Task Force

Our Mission

As generative AI becomes more integrated into cloud products across the public sector, the need for clear, consistent security standards is more important than ever. That’s why we’ve launched the AI Security Task Force—bringing together dedicated volunteers from GovRAMP’s public and private sector members to promote responsible and trustworthy innovation.

Our mission? To recommend enhancements to the GovRAMP Security Program that address the unique cybersecurity and trust challenges introduced by generative AI. Rather than building a new framework from scratch, we’re working within existing NIST-based standards—like NIST 800-53 Rev. 5 and the AI Risk Management Framework—to identify gaps, manage emerging risks, and share best practices. Through this collaborative and iterative approach, we aim to equip governments to confidently adopt AI-enabled cloud solutions while maintaining strong cyber resilience.

Resources

PRESS RELEASE

GovRAMP Launches AI Security Task Force

Read more about how this collaborative initiative brings together GovRAMP members to identify the unique security risks of generative AI and develop guidance for secure integration across cloud products.

RESOURCE

AI Security Task Force Charter

The charter outlines the purpose, scope, and objectives of the AI Security Task Force, guiding its efforts to enhance cybersecurity and trust standards for AI in cloud products through collaboration across the public and private sectors.

AI Executive Council

The AI Executive Council is a select group of state government CIOs and CISOs providing strategic guidance on cybersecurity standards for generative AI in cloud products.

Ryan Murray

AI Executive Council Member
CISO, Arizona

Dr. Craig Orgeron

AI Executive Council Member
CIO, Mississippi
Tony Sauerhoff Headshot

Tony Sauerhoff

AI Executive Council Member
Chief AI & Innovation Officer, Texas Department of Information Resources

Jason Snyder

AI Executive Council Member
CIO, Massachusetts, EOTSS Secretary

Shawnzia Thomas

AI Executive Council Member
CIO, Georgia | Executive Director, Georgia Technology Authority​

Tarek Tomes

AI Executive Council Member
CIO, Minnesota

Razaq Ahmed

Smartronix / SMX

Dan Aiken

Rubrik

James Armstrong

Actsoft

Dennis Bachman

Kansas Racing and Gaming Commission

Laura Baga

Twilio

Tony Bai

RISCPoint

Susan Baker

Cross-Sell, LLC

Jim Beckner III

Trimble

Gayle Berkeley

Rubrik

Erica Bradshaw

Commonwealth of Massachusetts

Noah Brown

GovRAMP PMO

Richard Brown

Genesys Cloud Services, Inc.

Jeff Burklo

Savvas Learning Company, LLC

Nikki Bushong

State of Michigan

Ashlee Carter

GovRAMP PMO

Errika Celsey

State of Arizona

Fabio Cerullo

Kitman Labs

Siddique Chaudhry

Snowflake

Molly Cohen

Recidiviz

Jorge Conde-Berrocal

V3 Cybersecurity, Inc.

Ted Cotterill

Accenture

Brian DaSilva

Mark43

Glen Deskin

Check Point Software Technologies

Johann Dettweiler

StackArmor

Amrit Dhir

Recidiviz

Stephanie Donofrio

Orca Security

Justin Donohoe

JJD Software

Drenan Dudley

Zscaler

Saeed Elahi

Tenable

Lorenzo Estrella

Payson Unified School District

Pete Fagan

Motorola Solutions

Lauren Farese

Oracle

Kathy Fraser

State of Minnesota

James Globe

Center for Internet Security

Kevin Greene

BeyondTrust

Gary Guercio

Fortreum

Pat Guest

NICTD

Dustin Hartigan

State of Michigan - DTMB

Shelley Hawkins

State of Texas

Peter Henggeler

Recidiviz

Collin Hill

City of Indianapolis & Marion County

Jennie Hoelscher

State of Texas

Payam Hojjat

State of California

Kristine Holt

Utah Department of Corrections

Ernie Hudson

Counter Tools

Eddie Kim

Everlaw

Colby King

Fivos

Ean Krenzin-Blank

SOS Technologies

Linda Markey

State of Texas - DIR

Rod Massey

SAP NS2

Chris Mayhew

Authorium, Inc.

Donnie McCleskey

Twilio

Felipe Medina

Geographic Solutions

Jodie Monette

State of Minnesota - BCA

Ken Morris

RAMPxchange

Rashad Munawar

BlackBerry

Brian O'Connor

Extreme Networks

Olutosin Oguntunde

Accenture

Jason Oksenhendler

Moss Adams

Anthony O'Neill

Commonwealth of Massachusetts

Derly Ortiz

Commonwealth of Massachusetts

Robert Otten

Flock Safety

Gaurav Pal

StackArmor

Roy Park

San Joaquin County Office of Education

Andy Perkins

Jadu

Nick Peters

Rubrik

Robert Peterson

Washington County, Idaho

Nicolas Ponce

Addigy

Ashwin Rao

Find Help

Ava Rassouli

Marin County

David Resler

GovRAMP PMO

Jon Ridpath

Aztec Software

Cheri Rolfes

Commonwealth of Massachusetts

Andrew Rudder

Commonwealth of Massachusetts

John Santore

Constellation GovCloud

Mary Schafer

Abnormal AI, Inc.

Calli Schlientz

DataBank, Ltd.

Tammy Spangler

NCSBN

Jared Spurgeon

State of Arizona - DES

Patrick Sullivan

Telos Corp.

Marvell Summerow

MapLarge

Said Syed

Snyk, Inc.

Bryan Tobek

GovRAMP PMO

Vladimir Trushkin

Chemwatch

Thomas Twigg

Michigan State Police

Joel Varty

Agility

Amy Ventura

GovRAMP Staff

Justine Verigin

Matrix Pointe Software

Thomas Volpe Jr.

C2 Labs

Nathan Willigar

Microsoft

Christopher Wright

Fortreum

AI Security Task Force Members

The AI Security Task Force is open to all GovRAMP member organizations—both public and private—who are committed to responsible AI innovation and shaping the future of secure, trustworthy cloud adoption.

This cross-sector group plays a vital role in identifying risks, surfacing insights, and helping define best practices at the intersection of AI, cybersecurity, and government procurement. Members contribute to actionable recommendations that support secure cloud adoption and strengthen public trust in emerging technologies.

GovRAMP Contacts

Leah McGrath

Executive Director GovRAMP
leah@govramp.org

Fred Brittain

Executive Advisor to GovRAMP PMO
fred@govramp.org

Aysha Davis

Program Analyst GovRAMP PMO
aysha@govramp.org

Track the Task Force’s Progress

The AI Security Task Force is advancing through a series of planned phases throughout 2026. The timeline below outlines where we are in the process and what’s coming next, so you can stay informed on the Task Force’s ongoing work.

Q1 2026

Foundation

The Task Force will finalize and roll out the AI Addendum, implement guidance for when AI capabilities trigger Significant Change Notifications, and introduce AI indicators within the GovRAMP Authorized and Progressing Product Lists. Initial analysis of AI overlays aligned with NIST guidance will begin during this phase.

Q1 2026

Q2 2026

Guidance Development

Work will focus on drafting practical guidance related to shared responsibility and procurement for AI-enabled cloud products. Member feedback will be collected, and targeted working groups will convene to refine proposed AI overlays and supporting materials.

Q2 2026

Q3 2026

Refinement

Draft guidance and overlays will be refined through continued working group activity and engagement with GovRAMP governance committees to ensure consistency, clarity, and alignment across the program.

Q3 2026