What happened
On 2026-08-03, NIST finalized and published two NIST Internal/Interagency Reports — IR 8578 (Workshop Summary Report for 'Cyber AI Profile' Hybrid Workshop #1, summarizing an April 2025 workshop) and IR 8607 (Workshop Summary Report for Hybrid Workshop #2, summarizing a January 2026 workshop that discussed the Preliminary Draft of the NIST Cybersecurity Framework Profile for Artificial Intelligence). These are companion/process documents feeding into the still-pending 'Cyber AI Profile' (NIST IR 8596), which has remained an initial preliminary draft since December 16, 2025 with its comment period closed since January 30, 2026 — no updated draft of the actual profile has been released in this window. Both workshop reports were confirmed via [extracted-metadata] datePublished=2026-08-03 on the CSRC pages.
Why it matters
The Cyber AI Profile is intended to become a NIST Cybersecurity Framework Community Profile specifically for AI systems — a potentially high-impact control mapping once finalized, given CSF's broad adoption. These workshop summaries show the initiative is still active (industry/government/academia input being incorporated) but confirm the substantive Cyber AI Profile document itself remains stalled seven-plus months after its initial preliminary draft, with no new IPD in this window. Organizations tracking future CSF-AI control mappings should monitor for the next draft rather than treat these summaries as new guidance.
Action needed
Monitor for the next iteration of NIST IR 8596 (Cyber AI Profile); no immediate compliance action required from these workshop summaries themselves.