AI Data Security: Best Practices for Securing Data Used to Train & Operate AI Systems (joint Cybersecurity Information Sheet)

Summary

Cybersecurity information sheet released on May 22, 2025, by CISA, the National Security Agency, the FBI and international partners. It explains how data security affects the accuracy, integrity and trustworthiness of AI outcomes, sets out risks from data security and integrity problems across the AI lifecycle (development, testing, deployment and operation), and recommends best practices for protecting data used to train and run AI systems. It is non-binding.

Key dates

1. May 22, 2025Takes effect
2. May 22, 2025Issued
3. October 16, 2026Checked against sources
4. October 21, 2026Checked against sources

Developments are added when the record is reviewed. Next review: October 16, 2027.

Evidence

Each passage is quoted from its source. The quoted passages are re-checked against the live pages every month.

1. CISA, the National Security Agency, the Federal Bureau of Investigation, and international partners released AI Data Security: Best Practices for Securing Data Used to Train & Operate AI Systems .

   Supports: Title and co-authoring agencies

   This guidance highlights the critical role of data security in ensuring the accuracy, integrity, and trustworthiness of AI outcomes.

   Supports: Purpose

   Publish Date May 22, 2025

   Supports: Date

   AI Data Security CISA Primary source