Developing requirements
NDAA Section 1513 and AI security
Congress has directed an AI security framework for defense contractors. Here is what is known and how to prepare.
What the statute does
FY 2026 NDAA Section 1513 directs development of an AI security framework and implementing procurement action. It addresses covered entities involved in developing, deploying, storing or hosting covered AI technologies under Department agreements.
Where implementation stands
DoD has not yet published the framework. The statute directs additions to DFARS and CMMC. The implementing requirements still need to be reviewed when issued; existing controls do not establish compliance with a future framework.
Prepare now
Keep an accurate AI use register, a data map and evidence references. Those records are the starting point for any security framework DoD adds.
Reviewed October 17, 2026. Recheck before relying on a finding.
Start with what you know
Find the gaps in your AI use.
Get a preliminary view of your tools, data practices and documentation.