50 U.S.C. § 3602: Director of the Agency and Director of Compliance

There is a Director of the National Security Agency. The Director of the National Security Agency shall be appointed by the President, by and with the advice and consent of the Senate. The Director of the National Security Agency shall be the head of the National Security Agency and shall discharge such functions and duties as are provided by this chapter or otherwise by law or executive order. There is a Director of Compliance of the National Security Agency, who shall be appointed by the Director of the National Security Agency and who shall be responsible for the programs of compliance over mission activities of the National Security Agency. the date of the first nomination by the President of an individual to serve as the Director of the National Security Agency that occurs on or after October 1, 2014 ; or the date of the cessation of the performance of the duties of the Director of the National Security Agency by the individual performing such duties on October 1, 2014 ; and the date of the first nomination by the President of an individual to serve as the Inspector General of the National Security Agency that occurs on or after October 1, 2014 ; or the date of the cessation of the performance of the duties of the Inspector General of the National Security Agency by the individual performing such duties on October 1, 2014 . Notwithstanding paragraph (1)(A) or (2)(A) of subsection (a), an individual serving as the Director of the National Security Agency or the Inspector General of the National Security Agency on the date that the President first nominates an individual for such position on or after October 1, 2014 , may continue to perform in that position after such date of nomination and until the individual appointed to the position, by and with the advice and consent of the Senate, assumes the duties of the position. The individual serving as Inspector General of the National Security Agency on the date of the enactment of this Act [ July 7, 2014 ] shall be eligible to be appointed by the President to a new term of service under section 403 of title 5 , United States Code, by and with the advice and consent of the Senate.” In this section, the term ‘counter-artificial intelligence’ means techniques or procedures to extract information about the behavior or characteristics of an artificial intelligence system, or to learn how to manipulate an artificial intelligence system, in order to subvert the confidentiality, integrity, or availability of an artificial intelligence system or adjacent system. Not later than 90 days after the date of the enactment of this Act [ Dec. 23, 2024 ], the Director of the National Security Agency shall establish an Artificial Intelligence Security Center (referred to in this section as the ‘Center’) within the Cybersecurity Collaboration Center of the National Security Agency. Developing guidance to prevent or mitigate counter-artificial intelligence techniques. Promoting secure artificial intelligence adoption practices for managers of national security systems (as defined in section 3552 of title 44 , United States Code) and elements of the defense industrial base. In accordance with subsection (d), developing security guidance to defend artificial intelligence technologies from technology theft by nation-state adversaries. Such other functions as the Director considers appropriate. identify vulnerabilities in advanced artificial intelligence technologies, with a focus on cybersecurity risks and security challenges unique to protecting such technologies from theft or sabotage by nation-state adversaries; identify elements of the artificial intelligence supply chain or development or product lifecycle that, if accessed by nation-state adversaries, would contribute to progress made by nation-state adversaries on advanced artificial intelligence or would provide opportunities to adversaries to compromise the confidentiality, integrity, or availability of artificial intelligence systems or associated supply chains; and identify strategies for artificial intelligence technologies to identify, protect, detect, respond, and recover from nation-state adversary cyber threats. In developing the guidance pursuant to subsection (c)(3), the Director of the National Security Agency may collaborate, on a voluntary basis, with other departments and agencies of the United States Government, research entities, and private sector entities, as determined appropriate by the Director, on artificial intelligence model safety and security, including through the provision of any computing resources the Director determines appropriate. The Director of the National Security Agency shall publish, and may update from time to time, the security guidance developed under subsection (c)(3) to share with departments and agencies of the United States Government, research entities, and private sector entities, as determined appropriate by the Director, at unclassified or classified levels. The Director of the National Security Agency may disestablish the Center established in subsection (b) not earlier than 3 years after the date of the enactment of this Act provided that the Director of the National Security Agency submits to the congressional intelligence committees [Select Committee on Intelligence of the Senate and Permanent Select Committee on Intelligence of the House of Representatives] a report documenting the rationale for disestablishment of the Center, including resource trades, effectiveness, priority, and any other pertinent considerations not later than 6 months prior to the disestablishment.” The President may designate the Director of the National Security Agency as a position of importance and responsibility under section 601 of title 10 , United States Code. Paragraph (1) shall take effect on the date of the enactment of this Act [ July 7, 2014 ].”