Insider Threat Reporting and Security Guidance Act of 2026
Require certain large AI contractors working with Defense to report security practices and risks, and provide voluntary guidance on insider threats.
In the Senate Armed Services Committee since Sept. 29, 2026, 9 days after it was introduced. Most bills never leave committee.
- INTRODUCEDINTROSEP 29, 2026
- COMMITTEECOMM.IN COMMITTEE
- SENATESENATE—
- HOUSEHOUSE—
- LAWLAW—
What the bill would do, and why it matters
AI systems used for defense work can face risks from unauthorized access, tampering, or insiders. The bill would require certain large AI contractors working with the Department of Defense to report security practices and serious risks. It would also direct the Secretary of Defense to issue voluntary insider-threat guidance and report to Congress on implementation.
- INTRODUCED ONLY This bill has been introduced and possibly referred to a committee, but it has not passed any vote. Most introduced bills never become law — they die in committee without a hearing.
- DATA NOTE No Congressional Research Service summary was available.
- Require security disclosures from covered AI contractors
The Secretary of Defense would set reporting rules for contractors with Department of Defense AI contracts worth at least $100 million and meeting the bill’s AI research-and-development or model-use criteria. Contractors would report their security practices and risks, submit the information with contract offers, and certify at least every 90 days that it remains materially accurate and complete.
- Set 72-hour incident alerts
A covered contractor would have to notify the Secretary of Defense within 72 hours after becoming aware of information, an incident, or a development presenting an acute national security risk. The Secretary would relay the notice to relevant defense and other officials and notify the House and Senate Armed Services Committees within 7 days after receiving it.
- Issue voluntary insider-threat guidance
The Secretary would issue guidance on reducing insider threats, espionage, and other personnel-related risks to contractors’ sensitive AI assets. The guidance would suggest security practices for sensitive roles and access, but contractors would not be required to adopt them; the Secretary would assess the risks and update the guidance.
- Report implementation to Congress
The Secretary would send the congressional defense committees an unclassified report, which could include a classified annex, on implementation, identified challenges or gaps, and any additional steps, authorities, resources, or policy recommendations the Secretary considers useful.
The bill focuses on risks to Defense systems, missions, personnel, operations, and supply chains that could arise from contractors’ security practices or from compromise or misuse of AI models. It identifies threats such as espionage, unauthorized access, theft, sabotage, and changes to models or the data and systems used to develop them.
The reporting rules would give Defense and Congress information about security practices and acute incidents, while the voluntary guidance would offer contractors suggested ways to reduce insider risks. The bill also calls for procedures to protect sensitive information submitted through the reporting process.
Written from the bill text.
The path it took, step by step
- IntroducedSEP 29, 2026SENATESEP 29, 2026By Sen. Banks with 1 original cosponsorReferred to Armed Services
- SAME DAYNOWSenate committeeSEP 29, 2026ARMED SERVICES NOWSEP 29, 2026In committee for 9 daysNo hearing yet
- 9 DAYS SO FARPassed the Senate—SENATE FLOOR—Not scheduled
- House committee—HOUSE—
- Passed the House—HOUSE FLOOR—Not scheduled
- Resolve differencesONLY IF NEEDEDBOTH CHAMBERSONLY IF NEEDEDSkipped if the other chamber passes the same text
- Signed into law—PRESIDENT—10 days to sign or veto
- SEP 292026SEP 29, 2026REFERREDRead twice and referred to the Committee on Armed Services.
- SEP 292026SEP 29, 2026INTRODUCEDSENATEIntroduced in Senate
At day 9, this bill is already older than 3% of the laws passed this Congress were when they were signed.
Where your members stand on it
Support from one state
Plus the sponsor, a Republican. Every cosponsor is from one party.
Plus the sponsor, a Republican. Every cosponsor is from one party.
Sen. Banks’s record: sponsored 107 bills this Congress. 2 passed the Senate; 0 became law.
- Kirsten E. GillibrandD-NYORIGINAL
What readers think
Discussion
Get an alert when it changes stage, gets a floor vote in the Senate, or is signed into law.