SEC · SEC-11 · record R0011
Evaluating Cybersecurity Alerts
Securities and Exchange Commission · Office of Information Technology (OIT)
Overview
- Development stage
- PilotSource: b) Pilot – The use case has been deployed in a limited test or pilot capacity.
- High-impact designation
- Not high-impactSource: c) Not high-impact
- Impact justification
- Not reported
- Start date
- 2025-08 (month precision)Source: 08/2025
- Withheld from public reporting
- NoSource: a) No
Mission
- Topic area
- Cybersecurity
- Operational functions
- Cyber threat detection Derived by keyword rules; see methodology
Problem the AI is intended to solve
Explore different mechanisms leveraging AI to inform and expedite cybersecurity processes.
Expected benefits
Enhances identification of anomalous cybersecurity alerts for review. Increases the effectiveness and efficiency of limited cybersecurity resources.
System outputs
Cybersecurity analysis reports and initial assessments of activity.
Technology
- AI classification
- Agentic AISource: Agentic AI: AI systems that perform tasks or make decisions autonomously with minimal human intervention.
- System name(s)
- Not reported
- Custom-developed code
- Yes
- Public source code
- Not reported
Sourcing
- How it was built
- Developed in-houseSource: b) Developed in-house
- Vendor (as reported)
- Not reported
- Vendors (standardized)
- None on the standard list
A vendor is the supplier named by the agency. It does not identify the underlying model or AI technology.
Data and privacy
- Involves PII
- No
- Privacy Impact Assessment
- Not reported
- Authorization to Operate
- No
- Demographic features
- k) None of the above
- Training and evaluation data
- Cybersecurity alerts
- Federal Data Catalog
- Not reported
Governance
0 of 8 minimum-practice questions answered. A blank answer means the agency reported nothing; it does not mean the practice is absent.
Pre-deployment testingNo answer reported
AI impact assessmentNo answer reported
Independent reviewNo answer reported
Ongoing monitoringNo answer reported
Operator trainingNo answer reported
Fail-safeNo answer reported
Appeal processNo answer reported
User and public consultationNo answer reported
Potential impacts and how they were identified
Not reported