(a) Framework required
The Secretary of Defense, acting through the Chief Digital and Artificial Intelligence Officer of the Department of Defense, shall establish a framework for the rapid deployment of artificial intelligence ( AI ), to be known as the Artificial Intelligence Model Rapid Deployment Framework (in this section referred to as the Framework ), to enable the evaluation, authorization, and deployment of AI systems on Department enterprise AI platforms, as appropriate. The objective of the Framework shall be to enable deployment of such systems on such platforms within 30 days after public availability.
(b) Elements
The Framework shall include the following elements:
(1) Vendor and model onboarding process
Establishment of standardized processes for deploying AI systems onto Department enterprise AI platforms, including security reviews, technical assessments, and integration with other Department systems and platforms.
(2) Common definitions and categories
Common definitions or categories for AI systems deployed on Department enterprise AI platforms, including systems with agentic capabilities, to support acquisition clarity, testing, authorization, and operational adoption.
(3) Security testing and evaluation
Establishment of security testing and evaluation capabilities to support security assessments for AI systems deployed on Department enterprise AI platforms, including adversarial testing, supply chain risk assessments, and other security testing appropriate for AI systems, consistent with existing cybersecurity and test and evaluation policies.
(4) Multi-classification deployment
Establishment of capability to deploy AI systems on Department enterprise AI platforms across multiple classification levels, as appropriate, with appropriate security controls and data isolation.
(5) Streamlined system authorization processes
In coordination with the Chief Information Officer of the Department, establishment of streamlined processes for authorization of AI systems deployed on Department enterprise AI platforms, including reuse of authorization artifacts, common control inheritance, and continuous monitoring capabilities.
(6) Registry and governance systems
Implementation of registry and governance processes to track version history, performance, security status, and compliance for AI systems deployed on Department enterprise AI platforms.
(c) Integration with other frameworks
The Secretary shall ensure that the rapid deployment of AI systems under the Framework is achieved in a manner that maintains security standards through integration with other relevant frameworks, including—
the plans, strategies, and other matters relating to AI required by section 1544 of the National Defense Authorization Act for Fiscal Year 2024 ( 10 U.S.C. 4001 note);
the Defense-wide policy required by section 1512 of the National Defense Authorization Act for Fiscal Year 2026 ( 10 U.S.C. 394 note); and
the framework and other requirements required by section 1513 of the National Defense Authorization Act for Fiscal Year 2026 ( 10 U.S.C. 2224 note).
(d) Compliance with requirements
The Secretary shall ensure that the Framework complies with all applicable requirements for test and evaluation of Department systems in accordance with applicable law, policy, and guidance.
(e) Metrics and reporting
The Chief Digital and Artificial Intelligence Officer shall—
establish metrics to measure the time required to evaluate, authorize, deploy, and update AI systems on Department enterprise AI platforms; and
in each of fiscal years 2027, 2028, 2029, and 2030, submit an annual report to the congressional defense committees on progress toward achieving the objective stated in subsection (a).
(f) Definition
In this section, the term Department enterprise AI platform means a centrally managed platform that hosts or provides AI services or applications for use across multiple elements of the Department, rather than for a single program, system, or mission application.