Insider Threat Reporting and Security Guidance Act of 2026

This bill requires the Secretary of Defense, within 180 days, to issue rules requiring large artificial intelligence contractors to report their security practices to the Department of Defense. It covers contractors with Defense contracts worth at least $100 million for AI systems that either spent at least $1 billion on AI research over three years or use a model from a company that did. Covered contractors would report security policies and incidents when they bid on contracts, certify the information every 90 days, and notify the Secretary within 72 hours of acute national security risks, and the Secretary would inform the Armed Services Committees within 7 days. The bill also directs the Secretary to issue voluntary guidance on reducing insider threat and espionage risks, update it after a risk assessment within one year, and report to Congress on progress.

Full text and official record on Congress.gov

Sponsors

• Jim Banks Republican sponsor
• 1 cosponsors