DOE · DOE-701 · record R3558

Agentic AI for cybersecurity change request reviews

Department of Energy · NR HQ - Naval Reactors (NR)

Overview

Development stage: In development or acquisitionSource: a) Pre-deployment – The use case is in a development or acquisition status.
High-impact designation: Not high-impactSource: c) Not high-impact
Impact justification: Output of generative AI is administratively prohibited from being used as principal responses in the various scenarios considered high impact.
Start date: Not reported
Withheld from public reporting: NoSource: a) No

Mission

Topic area: Cybersecurity
Operational functions: Cyber threat detection Derived by keyword rules; see methodology

Problem the AI is intended to solve

Use AI Agents for cybersecurity review of documents and structured data to improve processes and to help identify areas of risk.

Expected benefits

AI agents automate routine tasks, enhance decision-making, and improve operational efficiency. In addition, the AI Agent for cybersecurity will allow for a customized approach to tie specific requirement documents with structured data from a database.

System outputs

Depending on how the final product is designed, outputs can represent recommendations (e.g., suggesting a action), captured user inputs (like dates, names, or preferences), or contextual responses generated using AI.

Technology

AI classification: Agentic AISource: Agentic AI: AI systems that perform tasks or make decisions autonomously with minimal human intervention.
System name(s): Not reported
Custom-developed code: Not reported
Public source code: Not reported

Sourcing

How it was built: Not reported
Vendor (as reported): Not reported
Vendors (standardized): None on the standard list

A vendor is the supplier named by the agency. It does not identify the underlying model or AI technology.

Data and privacy

Involves PII: Not reported
Privacy Impact Assessment: Not reported
Authorization to Operate: Not reported
Demographic features: Not reported
Training and evaluation data: Not reported
Federal Data Catalog: Not reported

Governance

0 of 8 minimum-practice questions answered. A blank answer means the agency reported nothing; it does not mean the practice is absent.

Pre-deployment testingNo answer reported

AI impact assessmentNo answer reported

Independent reviewNo answer reported

Ongoing monitoringNo answer reported

Operator trainingNo answer reported

Fail-safeNo answer reported

Appeal processNo answer reported

User and public consultationNo answer reported

Potential impacts and how they were identified

Not reported