Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

National Cyber Director Sean Cairncross says the U.S. needs government and industry to work together on AI security so that risk controls protect critical systems without slowing the innovation the country needs to compete with China. The effort he described includes technical testing and safeguards, information sharing and early pilots—not a new consumer AI product.

Why Cairncross says cooperation matters

AI is developing in private companies, while its risks can reach critical infrastructure and national security. Cairncross’s argument is that neither side can manage that tension alone: companies need to secure the systems they build, and government needs industry’s technical knowledge and visibility into emerging threats.

In remarks reported by CyberScoop on October 1, 2026, Cairncross described coordination across critical-infrastructure sectors as improving both between industry and government and among companies. The aim is to make security part of deploying and scaling AI, rather than a barrier added after innovation has occurred. In March 2026, he similarly described technical security as fundamental to scaling AI.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What the collaboration involves

Evaluation and testing

Model evaluation and testing are intended to examine how a system behaves and how it performs under relevant conditions before or as it is used. The reports describe this as work underway, but do not specify a common testing standard, publish results, or establish that participating models have passed a government certification.

#1 Best Overall
Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

Guardrailing and sandboxing

Guardrailing means putting controls around a system’s behavior or use; sandboxing means evaluating or running it in an isolated environment to limit its interaction with other systems. In this policy context, they are among the technical approaches being explored to manage risk. The reported accounts do not provide implementation details or show how effective any particular safeguard has been.

Information sharing

Coordination also means exchanging information about threats and defensive responses. Cairncross has described companies as helping illuminate the cyber “battlefield” through information sharing and defensive action. That can give government and other organizations a clearer picture of risks affecting interconnected sectors.

What the ONCD pilots are testing

The Office of the National Cyber Director (ONCD) is involved in pilots that apply this coordination to real-world settings. The accounts identify two efforts, but do not report measured outcomes or provide enough detail to assess their results.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Yubico - YubiKey 5 NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-A or NFC, FIDO Certified - Protect Your Online Accounts
  • POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
  • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts

Defense infrastructure

One pilot involves the Department of Defense and the Cybersecurity and Infrastructure Security Agency (CISA) and touches defense infrastructure. The available description does not specify the systems involved, the exact AI use case, or the pilot’s findings.

Rural hospitals

A separate ONCD pilot involves rural hospitals. Its inclusion points to an interest in testing applications outside defense settings, but the reported information does not identify participating hospitals, describe a deployed system, or establish a patient-care or cybersecurity outcome.

How the roles of government and industry differ

Cairncross draws a distinction between government’s role in offensive cyber operations and industry’s role in defensive security. He explicitly said he was “not talking about private sector industry or companies engaged in a cyber offensive campaign.” Companies’ contribution, as he described it, is to share information, improve defenses and respond to threats—not to conduct offensive operations on the government’s behalf.

Rank #3
Yubico - YubiKey 5C NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified - Protect Your Online Accounts
  • POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
  • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts

This division also helps explain the caution around direct government control of AI systems. Cairncross warned that if government directly adjusts technical settings, reversing the intervention could be difficult and the innovation cycle could slow. His position is not that security controls are unnecessary; it is that coordination and security work should support innovation rather than lock in changes that are hard to undo.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How AI security fits into competition with China

Cairncross has linked AI security to the U.S. goal of helping American companies compete with China and promoting a U.S. technology stack internationally. He has also said AI companies need to secure their systems and protect technology they develop from Chinese appropriation and model-distillation efforts. Model distillation can refer to using outputs from one model to help train another; in the reported policy context, Cairncross presents such efforts as a concern for protecting U.S.-developed technology.

The approach therefore has two pressures to balance: stronger protections against misuse or appropriation, and enough room for companies to develop and deploy AI quickly. The reporting describes the policy rationale and pilot activity, not evidence that the United States has resolved that trade-off or that the pilots have improved its competitive position.

Rank #4
Yubico - Security Key NFC - Basic Compatibility - Multi-Factor Authentication (MFA) Key, Connect via USB-A or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

What the National Cyber Director’s office does

The White House says ONCD was created by the FY2021 National Defense Authorization Act. The National Cyber Director advises the President and coordinates cybersecurity policy and strategy across the federal government. The office’s stated remit includes information security, national cyber posture, deterrence of malicious activity, supply-chain and vendor security, international cyber norms and emerging technologies.

That remit helps explain why ONCD appears in work spanning AI, critical infrastructure and national security. The office coordinates policy; the pilot descriptions do not establish that it operates every participating system or sets technical controls for private companies.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.