DHS · DHS-2543 · record R1950

AI Security and Monitoring

Department of Homeland Security · USCIS

Find similar use cases DHS profile

Overview

Development stage: DeployedSource: c) Deployed – The use case is being actively authorized or utilized to support the functions or mission of an agency.
High-impact designation: Presumed high-impact, determined notSource: b) Presumed high-impact, but determined not high impact
Impact justification: This use case collates information provided by or authorized to be collected by an employee as part of network security process. The collated information supports decisions about staffing priorities but is not used to make security-related or employment-related decisions.
Start date: 2025-03-31 (day precision)Source: 2025-03-31T00:00:00
Withheld from public reporting: Not reported

Mission

Topic area: Cybersecurity
Operational functions: No function tag matched Derived by keyword rules; see methodology

Problem the AI is intended to solve

Organizations adopting AI face a number of risks from data leaks, shadow AI, and unsecured outputs.

Expected benefits

The gateway will secure enterprise AI use by discovering shadow AI, enforcing guardrails, and preventing data spills. Its benefits include improved compliance, reduced risk, real time protection, and enhanced visibility. Organizations are empowered to securely and efficiently adopt AI.

System outputs

The AI System outputs risk alerts, compliance reports, and audit logs. It predicts threats, recommends policy adjustment, and semi-autonomously enforces guardrails. It secures data and AI usage via blocking, masking, and context-aware decisions.

Technology

AI classification: Generative AISource: Generative AI: AI that generates new or synthetic content (e.g., images, videos, audio, text, code).
System name(s): ESS
Custom-developed code: Yes
Public source code: Not reported

Sourcing

How it was built: Purchased from vendorSource: a) Purchased from a vendor
Vendor (as reported): Lasso
Vendors (standardized): None on the standard list

A vendor is the supplier named by the agency. It does not identify the underlying model or AI technology.

Data and privacy

Involves PII: Yes
Privacy Impact Assessment: Not reported
Authorization to Operate: Yes
Demographic features: Not reported
Training and evaluation data: Test data formatted in a fashion to simulate PII/SPII/etc to ensure that the solution properly detects.
Federal Data Catalog: Not reported

Governance

0 of 8 minimum-practice questions answered. A blank answer means the agency reported nothing; it does not mean the practice is absent.

Pre-deployment testingNo answer reported

AI impact assessmentNo answer reported

Independent reviewNo answer reported

Ongoing monitoringNo answer reported

Operator trainingNo answer reported

Fail-safeNo answer reported

Appeal processNo answer reported

User and public consultationNo answer reported

Potential impacts and how they were identified

Not reported