US Governance — 2026-06-02

Trump Signs Narrowed AI Executive Order Requiring NSA and CISA Cybersecurity Benchmarking While Blocking Mandatory Licensing

BLUFVoluntary architecture and an unlikely August 1 benchmarking deadline leave the federal government without meaningful visibility into frontier AI cyber risk for the foreseeable future.

Trump signed an executive order on AI security Tuesday in private, after canceling a more demanding version last month following industry pushback 12. The order directs NSA, CISA, and Treasury within 60 days to develop a classified benchmarking process assessing AI models' advanced cyber capabilities and determine the threshold for "covered frontier model" designation 34. Developers may voluntarily provide up to 30 days of pre-release model access, and the order explicitly prohibits mandatory licensing, preclearance, or permitting requirements 123. Axios, citing a source familiar, reported that former White House AI czar David Sacks secured the no-mandatory-licensing clause and the 30-day window, reduced from 90 days in an earlier draft per TechCrunch, along with limiting scope to advanced models 12.

Analysis
The 60-day benchmarking framework directive is unlikely to hit its approximately August 1 statutory deadline. Neither NSA nor CISA has existing infrastructure for evaluating commercial frontier models under classification, and interagency technical deliverables on compressed timelines routinely slip. High analytic confidence rests on the absence of observable preparatory activity and the consistent historical pattern. The no-mandatory-licensing clause, anchored by primary White House text and corroborated by four major outlets, removes any legal lever to compel participation, leaving government insight into frontier model risk wholly dependent on voluntary cooperation. Developers may engage selectively to shape how "covered frontier model" thresholds are drawn, making the benchmarking process industry-directed in practice. Slippage strengthens arguments for legislative mandates over voluntary architecture.

5 sources