A new white paper from the National Association for Regulatory Administration calls for “smart (balanced) regulation” versus swinging between deregulation and stricter rules. According to NARA, modern regulation suggests the need for risk-based, responsive and outcomes-focused licensing to protect people. “Smart regulation allows agencies to maintain minimum health & safety protections while redesigning monitoring and regulatory structure to be simpler, evidence-driven, and risk focused,” the authors of the white paper explain. Anchoring Human Care Oversight in Smart (Balanced) Regulation, released in August, offers a roadmap to implement a risk-based model in a phased approach.
The Four phases of the implementation roadmap include:
The National Association of State Chief Information Officers asked Congress on August 31 to reauthorize the State and Local Cybersecurity Grant Program. In the letter, NASCIO pointed to recent attacks on municipal water systems as evidence of the threats targeting government networks and infrastructure. “SLCGP has provided essential resources to strengthen state and local cybersecurity capabilities and improve coordination across all levels of government,” explained NASCIO’s Executive Director Doug Robinson. “Congress should move promptly to provide a long-term and appropriately funded reauthorization of SLCGP to ensure states can continue this critical work.” Other priorities included reauthorizing First Net and preserving state authority to govern artificial intelligence. Robinson called these issues “critical to the ability of states to deliver secure, reliable and innovative technology services to the public.”
GovRAMP’s Asking Your Providers About AI guide offers a practical framework for evaluating generative AI in cloud products and understanding how these tools affect regulatory agency operations, data governance and risk management. The guide recommends multiple questions by topic. For data handling, for example, GovRAMP suggests asking: Is our data processed by AI? Is our data used to train, tune, or improve the model? Can we request deletion or expungement of our data? Other questions fall under the topics of feature activation and controls; agency and permissions; transparency, logging and change control, as well as risks, guidance and disclosure.
GovRAMP offers a way to evaluate these answers, helping governments identify strong answers. These strong answers include:
Renee Moseley joined GL Solutions in 2016 with an educational and professional background in research and writing, along with software documentation. At GL Solutions she produces informative content to help regulatory agencies stay current on news and information that supports their success.
